extension-reviewlisted
Install: claude install-skill andrewr303/claude-codex-plugin-lab
# Extension Review (Pre-Submission Scanner)
Scan extension source code and predict Chrome Web Store rejection risks. Generate a clear report.
Reference: https://developer.chrome.com/docs/webstore/troubleshooting
## Workflow (Execute This)
### Step 1: Ask report format
Ask user: **Markdown or HTML report?** (default: Markdown)
### Step 2: Locate and scan extension
```bash
# Find extension root
ls manifest.json wxt.config.ts plasmo.config.ts package.json 2>/dev/null
```
### Step 3: Run all checks
Execute these scans in order (see `references/scan-checklist.md` for grep patterns):
| # | Check | Violation Code | Severity |
|---|-------|---------------|----------|
| 1 | Remote code execution (eval, external scripts) | Blue Argon | CRITICAL |
| 2 | Code obfuscation (base64, char encoding) | Red Titanium | CRITICAL |
| 3 | Excessive/unused permissions | Purple Potassium | HIGH |
| 4 | Missing privacy policy | Purple Lithium | HIGH |
| 5 | Missing metadata (icons, description, screenshots) | Yellow Zinc | HIGH |
| 6 | Single purpose violation | Red Magnesium | HIGH |
| 7 | Deceptive behavior (description ≠ functionality) | Red Nickel | HIGH |
| 8 | Insecure data transmission (HTTP) | Purple Copper | HIGH |
| 9 | Keyword stuffing in manifest | Yellow Argon | MEDIUM |
| 10 | Minimum functionality check | Yellow Potassium | MEDIUM |
| 11 | Undisclosed affiliate links | Grey Titanium | MEDIUM |
| 12 | Cryptocurrency mining code | Grey Silicon | CRITICAL |
| 13 | Copyright circu