> cat /dev/github | grep security-tools
discovered 03 Aug 2026

tarnish

via awesome-list
→ View on GitHub
`tarnish` is a static-analysis tool designed for security researchers to automate the review process of Chrome extensions, facilitating the identification of potential vulnerabilities. Key features include a `manifest.json` viewer, fingerprint analysis, clickjacking detection, permission warnings, and scans for dangerous functions and entry points, all accompanied by relevant code snippets and detailed alerts. The tool also supports scalable deployment on AWS using ElasticBeanstalk and Docker, optimizing for cost efficiency.