Install
$ agentstack add skill-crper-agent-skills-chrome-web-store-submission ✓ scanned · ✓ verified — works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
About
Chrome Web Store Submission
Generate accurate, copy-and-paste Chrome Web Store submission content for a browser extension. Inspect the current project first, then draft answers in the exact language the user asks for while keeping the field structure stable and easy to paste into the Chrome dashboard.
What this skill covers
This skill is for submission-writing and compliance-copy tasks such as:
- single-purpose statements
- permission justifications
- remote-code answers
- data-use and privacy disclosures
- short description and detailed description
- reviewer notes
- screenshot captions or listing copy
This skill does not publish the extension or interact with Chrome Web Store APIs directly.
Workflow
1. Extract extension facts before writing
Run this first:
python3 ./skills/chrome-web-store-submission/scripts/inspect_extension_facts.py [project-root]
Use the JSON output as the primary source of truth. If the script returns status = error or leaves key fields ambiguous, then inspect these sources manually in this order:
manifest.jsonor build output manifestpackage.jsonwxt.config.ts- relevant entrypoints such as
src/entrypoints/background.ts - content scripts, popup pages, options pages, and HTML entrypoints when needed
Verify at least:
- extension name
- version
- requested permissions
- whether content scripts exist
- whether remote code is used
- whether user data is collected, transmitted, sold, or shared
2. Treat assessment states as hard gates
When inspect_extension_facts.py reports:
assessments.remote_code.status = no: you may say no remote code is usedassessments.remote_code.status = possible: do not claim “No remote code is used”; say the repo contains patterns that need manual confirmationassessments.data_transmission.status = no: you may say data is not transmitted to external serversassessments.data_transmission.status = possible: do not claim data stays local onlyassessments.data_sale_or_sharing.status = unknown: do not claim data is not sold or shared unless the repo or user explicitly provides evidence
3. Write from code, not from assumptions
When drafting any Chrome Web Store field:
- tie each permission to a concrete feature in the codebase
- prefer
permission_evidencefrom the inspector output over generic template text - do not justify permissions with “future use”
- distinguish local browser storage from server-side collection
- explicitly state when data stays local and is not transmitted
- only write permission sections for permissions that are actually requested by the extension, unless the user explicitly asks for a full template
- keep
host_permissionsseparate from API permissions when they matter for the form - flag ambiguity instead of guessing
4. Keep the output structure stable
Unless the user asks for a custom format, output in this order:
单一用途说明/Single Purpose- requested permission rationale blocks in a stable order
远程代码/Remote Code数据使用/Data Use短描述/Short Description详细介绍/Detailed DescriptionReviewer Note(optional)
For permission rationale blocks:
- include only permissions that are actually present in the extension config
- keep their order stable when multiple are needed
- do not invent
storage,contextMenus, orsidePanelsections when the extension does not request them
5. Honor the requested language
- If the user asks for Chinese, output only Chinese
- If the user asks for English, output only English
- If the user asks for bilingual, output Chinese first and English second
- If the user does not specify, match the conversation language
6. Use reviewer-friendly wording
Prefer concrete wording like:
- “Used to store user-entered configuration locally in the browser”
- “Used to add a right-click shortcut for opening the extension UI”
- “Used to open the extension in the browser side panel”
Avoid vague wording like:
- “Improves user experience”
- “Used for various features”
- “May be needed in some scenarios”
Ambiguity handling
If evidence is incomplete, write conservative copy:
- say what the code clearly shows
- say what still needs confirmation
- avoid absolute privacy or compliance claims without repo evidence
- prefer “The current repo inspection shows ...” over “The extension guarantees ...”
Output modes
Chrome form answers
Produce short, field-specific answers that can be pasted directly into the Chrome dashboard.
Listing copy
Produce:
- short description
- detailed description
- optional bilingual version
Reviewer note
When useful, produce a short reviewer note summarizing:
- the extension’s single purpose
- what each permission is used for
- whether remote code is used
- whether user data stays local
Accuracy checklist
Before finalizing, verify:
- the extension name matches current config
- the version matches current config
- permission explanations match the actual permission list
- permission explanations match concrete code usage when evidence is available
- remote-code answers match the actual code
- data-use answers match storage/network behavior
- no unsupported claims about privacy policy, encryption, or compliance are added without evidence
References
- Read
references/field-templates.mdfor reusable answer patterns and stable field order. - Read
references/permission-patterns.mdfor permission-specific wording beyond the basic examples.
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: crper
- Source: crper/agent-skills
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet — be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.