Browser Extension Permission Risk Analyzer

What this doesn't do: this is a static analysis of declared permissions against a documented risk taxonomy — it does not inspect the extension's actual code or runtime behavior, and it cannot tell you whether a permission is being misused or legitimately needed. A password manager, for example, can legitimately need broad host access and cookie access. A high-risk result means the combination is worth a closer look, not proof of malicious intent.