nex-site-trust-ext
Plan a Manifest V3 Website Trust Checker
Planning a website safety extension requires coordinating browser components, page signals, and external services. This guide outlines a no-build approach without supplying extension source code.
Mit meinem Agent installieren
Kopieren Sie diese Anfrage in Ihren Agent. Sie enthält die maßgebliche Skill-Seite und das Manifest.
Review the Skillstore skill "nex-site-trust-ext" from https://skillstore.io/skills/nexaiguy-nex-site-trust-ext.md and its manifest at https://skillstore.io/api/skills/nexaiguy-nex-site-trust-ext/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.Ihr Agent sollte weiterhin seinen Plan anzeigen und alle von der Sicherheitsrichtlinie verlangten Bestätigungen anfordern.
Agent-lesbare Ressourcen
Verwenden Sie diese Links, wenn ein KI-Agent, Crawler oder Skript sauberen Kontext benötigt, statt die vollständige Seite zu lesen.
Testen
„nex-site-trust-ext“ wird verwendet. What does this package actually include?
Erwartetes Ergebnis:
The package contains a public guide describing a Manifest V3 website trust checker. Extension source, scripts, and templates are not included.
„nex-site-trust-ext“ wird verwendet. Outline the proposed extension components.
Erwartetes Ergebnis:
- Background service worker: coordinate RDAP lookups and external threat checks.
- Content script: collect transparency signals and display warnings.
- Popup interface: present the proposed trust score.
- Settings interface: manage user-supplied API keys and local preferences.
„nex-site-trust-ext“ wird verwendet. Can these trust signals prove that a website is safe?
Erwartetes Ergebnis:
No. Domain age, SSL status, and transparency signals are heuristics. A future implementation needs validation and must communicate uncertainty.
Sicherheitsaudit
SicherAll three static findings are false positives: the URLs are attribution links, and the footer contains no system reconnaissance commands. No evidence found of prompt injection, credential theft, or executable malicious behavior in the supplied guide. Only documentation is included, so extension behavior and security claims cannot be verified.
Risikofaktoren
🌐 Netzwerkzugriff (2)
Diesen Bericht teilen & zitieren
Teile den versionierten Bewertungsbericht, das neutrale Badge, die Einbettungskarte und Zitate. Skillstore berichtet Nachweise, ohne zu entscheiden, ob dieser Skill sicher ist.
Berichtslink kopieren
https://skillstore.io/skills/nexaiguy-nex-site-trust-ext/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown-Badge
[](https://skillstore.io/skills/nexaiguy-nex-site-trust-ext?utm_source=security_passport_badge)HTML-Badge
<a href="https://skillstore.io/skills/nexaiguy-nex-site-trust-ext?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/nexaiguy-nex-site-trust-ext/security.svg" alt="Skillstore security assessment" loading="lazy"></a>Einbettungskarte
<iframe src="https://skillstore.io/embed/skills/nexaiguy-nex-site-trust-ext.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>Wissenschaftliche Zitate (APA · BibTeX · CFF)
APA-Zitat
nexaiguy. (2026). nex-site-trust-ext security audit report (audit version 1) [Author version 1.0]. Skillstore. https://skillstore.io/skills/nexaiguy-nex-site-trust-ext/audits/1BibTeX-Zitat
@techreport{nexaiguy-nexaiguy-nex-site-trust-ext-2026,
author = {nexaiguy},
title = {nex-site-trust-ext security audit report (audit version 1)},
institution = {Skillstore},
year = {2026},
number = {1},
url = {https://skillstore.io/skills/nexaiguy-nex-site-trust-ext/audits/1},
note = {Author version 1.0}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "nex-site-trust-ext security audit report (audit version 1)"
version: "1.0"
type: report
authors:
- name: "nexaiguy"
date-released: "2026-11-02"
url: "https://skillstore.io/skills/nexaiguy-nex-site-trust-ext/audits/1"
identifiers:
- type: other
value: "skillstore:nexaiguy-nex-site-trust-ext:audit:1"
description: "Skillstore immutable audit report identifier"
Skillstore-Score
Warum dieser Score Evidenzvertrauen: MittelWas Sie erstellen können
Scope a browser safety prototype
Translate the described scoring signals and extension components into an implementation checklist before development.
Review safety product requirements
Assess domain age, page transparency, warning behavior, and threat API requirements without assuming validated detection accuracy.
Study Manifest V3 architecture
Use the guide to discuss service workers, content scripts, popup interfaces, and local settings.
Diese Prompts ausprobieren
Summarize the proposed website trust checker. Separate documented features from files actually included in this package.
Plan a vanilla Manifest V3 prototype from this guide. Assign responsibilities to the service worker, content script, popup, and settings interface.
Review SSL status, RDAP domain age, and transparency signals as trust inputs. Identify false positives, unavailable data, and unverified assumptions.
Propose tests for a future implementation covering permissions, API key handling, network failures, local storage, and warning behavior. Do not claim tests already passed.
Bewährte Praktiken
- Confirm which implementation files are available before scheduling development or release.
- Validate scoring assumptions against representative legitimate and malicious websites.
- Review extension permissions, API key handling, and external request privacy before deployment.
Vermeiden
- Treating the guide as an included, tested extension codebase.
- Presenting a high trust score as proof that a website is safe.
- Publishing generated extension code without testing permissions, API failures, and warning behavior.