Ext-Ray

Ext-Ray inspects every extension you have installed and grades its security risk — entirely on your own device. WHAT IT DOES • Risk report: an A–F grade for your whole extension set, with a card per risky extension explaining, in plain English, what it could do (e.g. "Can read and change your data on all websites") — including Chrome's own warning text for that extension. • Change guardian: Ext-Ray remembers a snapshot of each extension's declared permissions and version, re-scans in the background, and notifies you when something changes silently — the pattern behind the major real-world extension attacks of 2024–26, where a trusted extension turns malicious through a quiet update. • One-click response: disable or remove a risky extension from the report (removal always goes through Chrome's own confirmation dialog). WHAT IT DOES NOT DO • No data collection. No servers, accounts, analytics, or telemetry. Ext-Ray makes zero automatic network requests; your extension data never leaves your device. • No code or traffic inspection. Ext-Ray reads only the metadata extensions declare (permissions, version, install source). A high grade means an extension can do risky things — it is not proof of malice, and Ext-Ray says so in the report. • Read-only by default. Ext-Ray never changes another extension without your click. PERMISSIONS, PLAINLY • "Manage your apps, extensions, and themes" — this is the read access that makes the audit possible. • Storage — your settings and the latest snapshot, kept locally. • Alarms — the background re-scan schedule. • Notifications — change alerts. Privacy policy: https://junnythemarksman.github.io/Ext-Ray/privacy/