Chrome Extension Permissions Risk Classification (MV3 Manifest Permissions, 44 entries)

An open reference dataset classifying every common Chromium (Manifest V3) extension permission by risk. Each row maps a permission (e.g. tabs, cookies, webRequest, nativeMessaging, identity, declarativeNetRequest) to its API scope, the kind of data it can read or modify, a normalized sensitivity tag, and a five-tier risk class from L1_minimal (e.g. activeTab, storage) to L5_critical (e.g. webRequestBlocking, tabCapture, nativeMessaging). Use it to triage whether an extension's requested permissions match its stated purpose or request more than it needs. An interactive permissions auditor built on this dataset is available at the Zovo Chrome extension permissions checker, which reads a published extension's manifest and flags high-risk grants before install. Columns: permission, api_scope, requested_by_example_category, access_level, data_sensitivity, risk_class, rationale, typical_safe_use. License: CC0 / public domain.