Open a package
Use an available public Store package or an authorized local CRX/ZIP. Browse source files without executing the inspected package. Availability and processing limits apply.
For developers and authorized reviewers
Read the source.
Understand the evidence.
Explore packaged Chrome extension source, review manifest permissions and follow potential findings back to the files that need your attention.
View on Chrome Web StoreRead the inspection guide
Review declarations
Understand manifest settings, requested permissions and endpoints found in scanned source. A declared URL does not prove that a network request was sent.
Check potential risks
Review possible exposed credentials and risky source patterns. Heuristics can miss issues or produce false positives; scores do not certify safety.
Optional AI
Extra help, with a clear credit cost
AI Decompile assists with rewriting selected source. Deep Rebuild Spec produces an implementation outline. These are separate credit balances; outputs need developer review and cannot recover arbitrary private server code.
Static inspection does not use backend AI credits. Review the disclosure before sending selected source to an AI service.
One-time credit packs
Starter: 10 AI / 5 Spec credits
Builder: 25 AI / 15 Spec credits
Pro: 80 AI / 25 Spec credits
Energy: 250 AI / 50 Spec credits
Purchased credits never expire. Each new free, registration or daily reward expires exactly 72 hours after its grant.
Check the selected pack, currency, tax, discount eligibility and final total at Gumroad checkout. A checkout click is not a verified payment. Refunds are reviewed under the applicable purchase terms and Gumroad process.
Review packs on GumroadStart with an authorized review
- Open X-Ray from the Chrome toolbar.
- Choose an available Store package or your authorized local CRX/ZIP.
- Inspect source and related findings; read surrounding code before drawing a conclusion.
- Export source for further review, or deliberately choose an optional AI action after checking its cost and data disclosure.
Release boundary: the published Store release and local test candidate are different. New getting-started cards, Help placement and other candidate changes are being verified before submission. Check the installed version; this page is not proof that every candidate feature has shipped.
Privacy with clear choices
Local package review is separate from sign-in, purchase records and optional remote AI. The current candidate keeps optional product analytics off until consent; sharing uses fixed feature events, not inspected source, full URLs, email or browsing history.
Older published builds may differ. Read the candidate policy and release information before relying on a particular data flow. Account and financial records are separate from optional analytics.
Read candidate data handlingRuntime Lab is separate
Static findings do not observe another extension's live traffic. Runtime Lab requires a separately reviewed companion, an authorized target and a compatible configured browser. Its installed end-to-end acceptance is still pending; no universal monitoring claim is made.
An isolated browser profile is not an operating-system sandbox. Source patterns, generated architecture and AI text are not guarantees of original behavior or a working clone.