Dynamics CRM Dev Helper Edge extension security report

Dynamics CRM Dev Helper is a powerful developer productivity extension built specifically for Microsoft Dynamics 365 (model-driven apps). It injects a floating, draggable dev panel directly into your CRM environment, giving you instant access to tools that normally require hours of manual work. ─── FEATURES ───────────────────────────────────── ⚡ QUICK ACTIONS (from the toolbar popup) • Unhide All Fields — reveal every hidden field, tab, and section on the form. Click again to re-hide only the ones that were originally hidden. • Lock / Unlock Fields — remove disabled state from all controls for testing. Click again to restore only the fields that were originally locked. • Fill Dummy Data — auto-fill every field with realistic test data based on its type (text, number, date, option set, boolean, email, phone, and more). Click again to restore all original values instantly. 🛠 FLOATING DEV PANEL Open a draggable panel that stays on top of your CRM environment with seven powerful tabs. Form-specific tabs detect whether a record form is open and guide you — API tools work on any Dynamics page. 📋 Fields Tab • View every attribute on the current form • See logical name, display name, field type, required level, current value, visibility state, and lock state • Sort and filter fields in real time 🔗 Relationships Tab • Fetch live relationship metadata for the current entity • View One-to-Many, Many-to-One, and Many-to-Many relationships • Collapsible tree view with schema names and referencing attributes </> API Generator Tab • Auto-detect the current entity • Select fields and instantly generate JavaScript Web API, C# QueryExpression, or FetchXML • One-click copy to clipboard — works on any Dynamics page ▶ API Tester Tab • Search and select any entity from a live dropdown • Choose an operation (Retrieve Multiple, Retrieve Record, Create, Update, Delete, or Custom JS) • Browse and select fields with type badges — $select is auto-generated • Run JavaScript API calls directly inside the CRM page context • View results as a collapsible JSON tree with execution time — works on any Dynamics page λ Plugin Execution Viewer • See all registered plugin steps for the current entity grouped by message type • View stage, sync/async mode, execution rank, plugin class, and assembly • No need to open the Plugin Registration Tool {} Form Script Viewer • List all JavaScript libraries and event handlers registered on the current form • Grouped by event type (OnLoad, OnSave, OnChange) with enabled state and execution context flag ⚖ Business Rule Inspector • View all business rules for the current entity with Active/Inactive status • Filter by status, see scope and condition/action counts, expand to read descriptions ─── WHO IS THIS FOR? ──────────────────────────────── • Dynamics 365 developers testing and debugging forms • Power Platform consultants customizing model-driven apps • QA engineers filling test data across complex forms • Solution architects exploring entity relationships, plugins, and metadata • Anyone who wants to understand what's running on a CRM form without digging through solutions ─── TECHNICAL NOTES ───────────────────────────────── • Works on Microsoft Dynamics 365 Unified Interface • Manifest V3 — no background eval, fully compliant • No external servers — everything runs locally in your browser • No login required — works within your existing Dynamics 365 session • API Tester and API Generator work on any Dynamics page; all other tabs require an open record form • Plugin Viewer, Form Script Viewer, and Business Rule Inspector require read access to metadata entities (standard for System Customizer or Administrator roles)