Developer Tools extensions
Security reviews of 151 Developer Tools browser extensions, each rated on what its code does when it runs.
Request Interceptor
beDev
CleanRequest Interceptor captures active-tab request URLs, headers, and POST bodies after the user enables interception.
SEO Extension ROSSK Free SEO Checker, Link Analyzer, SEO Toolbar,Site Audit
Developer
LowSEO Extension ROSSK writes user-agent spoofing settings into each visited site's localStorage.
SEO station de Carlos Estévez
Carlos Estevez
CleanSEO station de Carlos Estevez reads SEO metadata from the active page when its popup opens.
SF Search
Yasir Arafat
CleanSalesforce Advanced Search & Record Details uses your Salesforce session cookie to query Salesforce REST APIs.
Site Contrast - Full Page WCAG 2.2 & APCA Contrast Checker
CleanSite Contrast captures the active tab's URL, visible text metadata, and element screenshots when you run a contrast scan.
Vibe n8n - AI assistant for n8n
8node Labs
CleanVibe n8n sends included workflow details to vibe-n8n.com when you ask it to improve a workflow.
Web Vitals
Jose Manuel Fernández
LowWeb Vitals sends the active tab URL to Google Chrome UX Report when its popup loads field data.
AutoReview for Power Automate
Power DevBox
CleanReviews Power Automate flows and generates reports, diagrams, comparisons, and export files.
Bootstrap grid viewer
Rastislav Hepner
LowBootstrap grid viewer loads Font Awesome from use.fontawesome.com when its popup opens.
Bugasura
AppAchhi
CleanBugasura captures screenshots and page URLs during active test sessions and uploads test results to api.bugasura.io.
Codeforces Custom Contests
Avinash Devineni
LowCodeforces Custom Contests accepts cross-origin messages that create Codeforces gym contests from supplied problem and invite data.
Conventional Comments (GitHub) - by Pullpo
TOPUS SOFTWARE SL
LowConventional Comments sends GitHub and GitLab pull request identity details to Pullpo by default.
Copy Host
Dheeraj Joshi
LowCopy Host loads a Google Fonts stylesheet from its popup when the extension is opened.
Detectify Recorder
detectify-team
LowDetectify Recorder sends recording auth tokens through page-visible frame messages that can write stored commands.
Digital Data Viewer
mike gieson
CleanDigital Data Viewer (DDV) captures Adobe Analytics and XDM request details from the inspected tab for local display and export.
EbayGPT: ChatGPT Ebay listing optimization
GPTDeveloper
LowEbayGPT injects extension resource URLs into supported pages, making its installed extension ID visible there.
Email Verifier by ZeroBounce
chrome
CleanEmail Verifier by ZeroBounce sends page email addresses to ZeroBounce when you validate them.
Fasterize Status
fasterize
CleanFasterize Status stores each tab's main-frame URL and response metadata locally to show Fasterize/CDN status.
JSON Hero
JSON Hero
CleanJSON Hero sends page JSON and supported metadata from the current tab to jsonhero.io.
Neon work clock - newtab
bit199801
LowNeon work clock sends top-site hostnames from the new-tab page to favicongrabber.com for favicon lookup.
overfig-%E2%80%93-compare-design
AZN Research
MediumOver.fig forwards Figma overlay project data into the active web page.
Perseo
perseo.pro
LowPerseo records HTTP(S) page navigation URLs and request and response headers in local extension storage.
Playwright POM Generator
TheWonderApps
CleanPlaywright POM Generator analyzes the active tab's URL, title, and page elements when you request POM generation.
SEO Checker by Sekhlo
imubashirhassan
LowSEO Checker by Sekhlo sends page and Google result domains to external SEO metric services.
Show Keys
Shuvam Manna
CleanShow Keys displays typed keys on every website in a page overlay when its toolbar toggle is enabled.
Tenderly Dev Toolkit
Tenderly
CleanTenderly Dev Toolkit sends URL-detected Ethereum transaction hashes to Tenderly's public transaction API.
VidNinjas — YouTube Analytics & AI Creator Tools
cloud-admin
CleanVidNinjas sends user-selected YouTube transcripts and video metadata to AI chat sites for its remix feature.
WPoptic | WordPress Theme Detector and Plugins Detector
WPoptic
MediumWPoptic sends your Chrome profile email to api.wpoptic.com and reports WordPress site URLs and detected technologies.
Wattspeed
Wattspeed
CleanWattspeed sends the active tab URL to api.wattspeed.com when you run page audits from its popup.
YAML Validator
Oleksandr Chupryna
LowYAML Validator sends usage telemetry to PostHog despite its store listing claiming your data never leaves your machine.
Useful
mikexia930
LowUseful's bundled Markdown editor loads highlight.js, KaTeX, and other libraries from cdnjs.cloudflare.com without integrity checks.