barvhaim/ThreatXtension ? reverse-engineered prompt

Build me a tool that can inspect Chrome extensions and tell me if they look shady before I install them.

I want to be able to paste a Chrome Web Store link, enter an extension ID, or upload a local crx or zip file, then get a clear risk report that explains suspicious permissions, possible credential theft, data exfiltration, obfuscation, and other malicious behavior in plain English. It should combine static code checks, reputation checks, and threat intelligence, then give an executive summary with practical advice on what to watch out for.

Please include a simple web dashboard, a command line way to run scans, and an API so other tools can call it. If it makes sense, add support for Claude Desktop too. Make the results easy to read, with file listings, scan status, and a downloadable report. Use current docs online if you need to, and keep the setup straightforward with a local dev option and Docker support.