Environments Portal Chrome extension security report

Environments Portal answers two questions that cost software teams time every week: which internal test environments exist for each release and are they up, and which test customers exist on each one. It ships knowing nothing. There are no hosts, no page ids, no URL patterns and no queries in the package. After installing, you import a configuration profile — a JSON file describing your own systems — and grant access to exactly the hosts that profile names. Nothing is contacted until you do. WHAT IT DOES • Reads the wiki pages you nominate and builds an inventory of environments from the tables on them, with the addresses and links each row carries. • Checks whether each environment is up, by requesting the health endpoint you configure and looking for the marker you specify. No sign-in, no credentials. • Lists the test customers on each environment, by running the read-only queries you define against the database console you point it at. • Answers questions in plain language, if you enable it and supply your own OpenAI-compatible endpoint. It looks every fact up through the same queries the pages use rather than recalling it, and any ad-hoc SQL it drafts is shown to you for approval and can only ever be a single read-only SELECT. WHAT IT DOES NOT DO • No analytics, no telemetry, no tracking, no ads. • Nothing is sent to the developer, ever. Data goes only to the servers named in your own profile, and to the model endpoint you configure if you enable the assistant. • No remotely hosted code. The whole extension is in the package you install; a profile is data, never script. FIRST RUN 1. Import a configuration profile. Someone configures one install and shares the export — it never contains passwords. 2. Allow access to the hosts that profile names. 3. Enter your own credentials: a wiki access token, and the database sign-in if you want the customer list. These stay on your machine. Requires Chrome 116 or later. Your organization's systems must be reachable from your machine — over the corporate network or VPN, as usual.