feat(browser): model malicious browser-extension impact (CursedChrome triage)#4

Merged

noahpotti merged 11 commits into

mainfrom

feat/browser-extension-impact

Jul 7, 2026

Commits on Jul 7, 2026

feat: --browser — model malicious browser-extension impact
Noah
committed
feat(browser): weight provenance — sideloaded high, Web Store near-info
Noah
committed
fix(browser): harden trust anchor; add Brave/Chromium/Vivaldi; Windows cookie fallback
Noah
committed
fix(browser): surface UNPACKED extensions (the highest-risk case)
Noah
committed
refactor(browser): de-sensationalize severity
Noah
committed
fix(browser): elevate the real signal — unsigned + all-sites = CursedChrome
Noah
committed
feat(browser): responder triage bundle for sideloaded extensions
Noah
committed
fix(summary): browser notes are findings to investigate, not credentials to rotate
Noah
committed
feat(browser): route Web Store check via --proxy; score the granted host set
Noah
committed
fix(browser): stop meta-context from bumping tiers; add --all inventory
Noah
committed
docs: document --browser/--all, Chromium-family coverage, cookie-metadata scope
Noah
committed