crx-permission-risk
Score the privilege a Chrome MV3 extension takes from its manifest, and diff permission sets.
使うべきか
品質と安全性
ツール定義とプロトコルへの準拠に関する自動分析に基づいています。
コンテキストコスト
これは、サーバーのツールがモデルのコンテキストに読み込まれるたびに消費されるおおよそのトークン数です。数が多いほど、ほかのタスクに使える注意が減ります。
インストール
ワンクリックインストール
これを `claude_desktop_config.json` ファイルに追加してください:
{
"mcpServers": {
"crx-permission-risk": {
"url": "https://crx-permission-risk-mcp.lipmichal.workers.dev/mcp"
}
}
}リモートエンドポイント
https://crx-permission-risk-mcp.lipmichal.workers.dev/mcpstreamable-httpできること
ツール一覧
ツール（3）
🟢analyze_manifest(manifest)
Static privilege analysis of a Chrome MV3 manifest.json. Returns a 0-100 risk score, the permissions and host patterns that drive it, dangerous permission combinations, and MV3 policy problems (remote code, unsafe-eval, <all_urls> web_accessible_resources). Content-script matches are counted as host access even when host_permissions is empty.
入力スキーマ
{
"type": "object",
"properties": {
"manifest": {
"description": "The manifest.json content, as a JSON object or a JSON string."
}
},
"required": [
"manifest"
]
}🟢explain_permission(permission)
Returns the privilege weight (0-10) for a single Chrome extension permission or host pattern, what it actually grants, whether it triggers an install-time warning, and the narrower alternative if one exists.
入力スキーマ
{
"type": "object",
"properties": {
"permission": {
"type": "string",
"description": "A permission name such as cookies, or a host pattern such as <all_urls>."
}
},
"required": [
"permission"
]
}🟡compare_permission_sets(before, after, before_hosts, after_hosts)
Compares the permissions and host patterns of two versions of an extension. Reports the score delta, what was added or removed, and whether the change widens the install-time warning set, which makes Chrome disable the extension for existing users until they re-accept.
入力スキーマ
{
"type": "object",
"properties": {
"before": {
"type": "array",
"items": {
"type": "string"
},
"description": "API permissions in the current published version."
},
"after": {
"type": "array",
"items": {
"type": "string"
},
"description": "API permissions in the new version."
},
"before_hosts": {
"type": "array",
"items": {
"type": "string"
},
"description": "host_permissions in the current published version."
},
"after_hosts": {
"type": "array",
"items": {
"type": "string"
},
"description": "host_permissions in the new version."
}
},
"required": [
"before",
"after"
]
}コミュニティ
エビデンス