Shyeld

See what your browser extensions can read in your email, files, and AI chats. Runs entirely on your device.

Shyeld shows you which of your browser extensions can read your email, your files and docs, and your AI chats, and tells you when that changes. Extensions often ask for access to "all websites". That quietly includes your webmail, your files and documents, and your AI chats. Shyeld turns each extension's Chrome permissions into plain English so you can decide what to keep. WHAT IT DOES • Checks every extension installed in this browser and lists what each one can do, in plain English (for example "Can read and change your data on all websites" or "Can read your clipboard"). • Flags extensions that can read your webmail, your files and documents, or your AI chats. Access to all websites counts as access to all of them. • Checks each extension against a built-in copy of a public list of known-malicious and removed extensions, and shows the listed reason for any match. • Flags extensions that weren't installed from the Chrome Web Store, and explains in plain English when one can also talk to a program on your computer. • Gives each extension a High, Medium or Low risk level with a one-line reason, highest risk first, plus a short summary at the top. Extensions you've turned off are listed separately. • Alerts you when a new extension is installed, when an extension gains new permissions, or when a turned-off extension is turned back on. You'll see a badge on the toolbar icon and a list in the popup. • Lets you turn an extension off after confirming, or remove it through Chrome's own confirmation dialog. Nothing is changed unless you confirm. PRIVATE BY DESIGN • Everything runs on your device. Shyeld makes no network requests: no account, no analytics, no servers. The known-malicious list is built in and is never downloaded. • It has no access to any website. It only reads your list of installed extensions and their permissions. • It keeps a small snapshot and your alert history in local extension storage so it can spot changes. You can delete it from the dashboard, and removing Shyeld deletes it. GOOD TO KNOW • Version 0.2 checks browser extensions only. Checking apps connected to your Google or Microsoft account and AI-assistant integrations is planned but not included yet, and the dashboard says so. • Risk levels are rules of thumb based on permissions, install source and the built-in list. Not being on the list doesn't prove an extension is safe. • Chrome only reports permissions an extension currently has. Optional permissions show up once granted, and Shyeld alerts you then. Permissions: "management" (to list your extensions and their permissions, and to turn one off or remove it when you ask and confirm), "storage" (to keep the local snapshot and alerts), "alarms" (for an hourly on-device check). Privacy policy: https://shyeld.app/privacy#extension Questions: privacy@shyeld.app