Ext-Ray

About

Ext-Ray inspects every extension you have installed and grades its security risk — entirely on your own device.

WHAT IT DOES 
• Risk report: an A–F grade for your whole extension set, with a card per risky extension explaining, in plain English, what it could do (e.g. "Can read and change your data on all websites") — including Chrome's own warning text for that extension. 
• Change guardian: Ext-Ray remembers a snapshot of each extension's declared permissions and version, re-scans in the background, and notifies you when something changes silently — the pattern behind the major real-world extension attacks of 2024–26, where a trusted extension turns malicious through a quiet update. 
• One-click response: disable or remove a risky extension from the report (removal always goes through Chrome's own confirmation dialog).

WHAT IT DOES NOT DO 
• No data collection. No servers, accounts, analytics, or telemetry. Ext-Ray makes zero automatic network requests; your extension data never leaves your device. 
• No code or traffic inspection. Ext-Ray reads only the metadata extensions declare (permissions, version, install source). A high grade means an extension can do risky things — it is not proof of malice, and Ext-Ray says so in the report. 
• Read-only by default. Ext-Ray never changes another extension without your click.

PERMISSIONS, PLAINLY 
• "Manage your apps, extensions, and themes" — this is the read access that makes the audit possible. 
• Storage — your settings and the latest snapshot, kept locally. 
• Alarms — the background re-scan schedule. 
• Notifications — change alerts.

Privacy policy: https://junnythemarksman.github.io/Ext-Ray/privacy/