Edge Inspector

This tool analyzes Edge extension packages and live builds by examining the manifest.json, declared permissions, host_matches patterns, and the list of API surfaces used by scripts. It identifies potential risk signals such as broad permissions, wildcard hosts, or deprecated APIs, and flags compatibility gaps with the Edge extension model. It also inventories background scripts, content scripts, and event listeners to help auditors understand runtime behavior without executing untrusted code. It is scoped to the extension package provided by the user and does not assume network activity beyond optional metadata lookups.
Conceptually, the tool parses source files and configuration, builds a data model of the extension, and applies a rule set that assesses security, privacy, and performance implications. It uses static checks to catch dangerous patterns, and dynamic simulation of common runtime paths to surface timing or permission conflicts. The results include a risk score, a categorized list of findings, and a structured report suitable for code review or security sign-off. Edge-specific constraints (MV3, host permissions, and browser APIs) are prioritized in evaluation.
Who benefits: developers preparing a release, security engineers performing reviews, and QA teams validating policy compliance. Unique value lies in Edge-tailored evaluation, fast turnaround, and exportable artifacts that integrate with CI pipelines. Core features include manifest analysis, permission risk scoring, API usage catalog, host matching verification, performance footprint estimation, and exportable reports. Typical use cases include pre-release audits, compliance checks, and optimization of extension manifest to minimize user friction and risk.