AI Chat Shield reviews installed-extension metadata, declared permissions, host access, and install-source signals. It never reads your chat content or browsing history.
Illustrative report. Scores measure declared capability exposure, not confirmed malicious behavior.
Recent research shows how legitimate-looking extensions and later updates can expose sensitive AI conversations. Store placement and ratings are useful context, not proof of safety.
Koi documented AI-chat collection across eight Chrome and Edge extensions with more than eight million combined users.
Microsoft reported malicious Chromium extensions that copied familiar AI-assistant branding while collecting URLs and ChatGPT or DeepSeek content.
The Urban VPN collection code arrived in a later version. Rechecking access after extension changes matters even when the original install looked reasonable.
Chrome exposes another extension's declared metadata and permissions, not its private source code or live traffic. AI Chat Shield turns the available evidence into an explainable review queue.
Each installed extension receives a transparent exposure score based on five signals the browser makes available.
On supported AI sites, the toolbar cross-references the current page with the latest local capability scan.
Know the limit: AI Chat Shield cannot see another extension's private code, inspect its DOM activity, observe its network traffic, or certify it as safe. A high score means “review this access.” A low score is not a guarantee.
The free capability scan and activity data stay in local extension storage. The optional Pro activation flow has one narrow server boundary: the subscription email you choose to enter.
Installed-extension metadata, exposure scores, settings, and activity history remain in local extension storage.
The extension does not read prompts, responses, page content, full URLs, or browsing history.
No product analytics, advertising, or scan-result uploads are built into the consumer extension.
If you activate Pro, the entered email is sent to our validator. The returned status and email are stored locally, not in Chrome Sync.
The capability scan is free and needs no account. Pro activity history is optional.
Add to Chrome - Free