SECURITY REPORT · EXTENSHI SCAN
Arcane Scout — API Pentesting Toolkit
Chrome extension·by Matéo Callec
53
/ 100 SAFETY SCORE
RISKY
Several elevated signals. Read the findings before sharing this with your team.
Automated analysis of publicly available code — not a professional security audit. It may produce false positives and does not prove an extension is unsafe or safe. Treat it as one signal among many. Disclaimer · Report an issue
How it ranks
Arcane Scout — API Pentesting Toolkit's safety score vs every other extension we've scanned
Globally
3%of extensions carry more risk
Riskier ←→ Safer
Ranked against 409,539 extensions
In Privacy & Security
2%of privacy & security extensions carry more risk
Riskier ←→ Safer
Ranked against 12,541 privacy & security extensions
Findings
157
median 5Lower is safer
Critical findings
1
median 0Severity = Critical
Permissions
3
median 4Declared in manifest
Active users
36
median 3vs category median
Findings breakdown
Automated security signal · 157 distinct issues across 6 severities
157
distinct issues
detected
detected
Scanners reported 159 raw occurrences; repeats of the same issue at the same location are merged here. The list below shows every occurrence.
Critical11%
High138%
Needs Review00%
Medium13989%
Low43%
Info00%
Permissions requested
1 risky permission of 3 total
1 high-risk permission require attention
This extension requests 3 permissions in total. 1 of them grant broad capabilities that are worth a careful look.
High
Access browser cookies
Can read and modify cookies, potentially accessing login sessions
Medium
Add context menu items
Can add custom items to the right-click context menu
Medium
Store local data
Can save data locally in the browser for persistence
Are you the author of Arcane Scout — API Pentesting Toolkit?
Claim this extension to respond to findings, add context, and earn a verified badge on extenshi.io.
Add the badge to your README
Show Arcane Scout — API Pentesting Toolkit's live security score on GitHub or in your docs
Scan performed by extenshi.io · Jul 25, 2026
Browser extensions made transparent.