← ClaudeAtlas

extension-reviewlisted

Scan extension source code for Chrome Web Store rejection risks. Generates report with issues, root causes, and fixes. Use when: review, pre-submit, rejection, CWS compliance, store review.
andrewr303/claude-codex-plugin-lab · ★ 0 · Code & Development · score 60
Install: claude install-skill andrewr303/claude-codex-plugin-lab
# Extension Review (Pre-Submission Scanner) Scan extension source code and predict Chrome Web Store rejection risks. Generate a clear report. Reference: https://developer.chrome.com/docs/webstore/troubleshooting ## Workflow (Execute This) ### Step 1: Ask report format Ask user: **Markdown or HTML report?** (default: Markdown) ### Step 2: Locate and scan extension ```bash # Find extension root ls manifest.json wxt.config.ts plasmo.config.ts package.json 2>/dev/null ``` ### Step 3: Run all checks Execute these scans in order (see `references/scan-checklist.md` for grep patterns): | # | Check | Violation Code | Severity | |---|-------|---------------|----------| | 1 | Remote code execution (eval, external scripts) | Blue Argon | CRITICAL | | 2 | Code obfuscation (base64, char encoding) | Red Titanium | CRITICAL | | 3 | Excessive/unused permissions | Purple Potassium | HIGH | | 4 | Missing privacy policy | Purple Lithium | HIGH | | 5 | Missing metadata (icons, description, screenshots) | Yellow Zinc | HIGH | | 6 | Single purpose violation | Red Magnesium | HIGH | | 7 | Deceptive behavior (description ≠ functionality) | Red Nickel | HIGH | | 8 | Insecure data transmission (HTTP) | Purple Copper | HIGH | | 9 | Keyword stuffing in manifest | Yellow Argon | MEDIUM | | 10 | Minimum functionality check | Yellow Potassium | MEDIUM | | 11 | Undisclosed affiliate links | Grey Titanium | MEDIUM | | 12 | Cryptocurrency mining code | Grey Silicon | CRITICAL | | 13 | Copyright circu