httppayai

agents.writerslogic.com

Compares an old and a new manifest and reports every way the new one gains privilege, for agents reviewing dependency bumps and extension or app updates. npm package.json: new or changed install-time lifecycle scripts, gypfile, bin entries and URL/git/file dependencies (including overrides). Chrome manifest.json: added permissions with Chrome's own warning text, host access not covered by the old host_permissions or content_scripts matches (match-pattern coverage, not string equality), externally_connectable, web_accessible_resources and CSP loosening. AndroidManifest.xml: added uses-permission with dangerous/special tier, newly exported components or lost permission guards, grantUriPermissions and debuggable/cleartext/backup flags. Does not fetch packages, inspect code, resolve manifest merging or judge whether a permission is justified.