GitHub Search Toolkit (Unofficial) Chrome extension security report

GitHub Search Toolkit (Unofficial) is a Chrome extension that helps you compose, save, and launch high-signal GitHub search URLs from a side panel — without scraping, automation, or API calls. The extension only generates URLs and opens them in your existing browser session. ═══ What it does ═══ A guided builder for GitHub's qualifier-stacked search across Repositories, Issues, Pull Requests, Code, Commits, Users, and a few well-known inbox pages (review queue, assigned issues, trending). A live URL preview updates as you compose, and every search can be saved to your local library for one-click re-use. ═══ Use cases ═══ • Trending repos in a language — past week: language:rust pushed:>... with stars: thresholds, ready in one click from the Trending template. • Review queue — PRs requesting your review: is:open is:pr review-requested:@me — your daily PR inbox without leaving the side panel. • Assigned issues — across orgs: is:open is:issue assignee:@me, scoped by org or label with the saved-search Customize flow. • Stars + recency + license: language:typescript stars:>500 pushed:>2024-01-01 license:mit for sourcing well-maintained, permissively-licensed libraries. • Code search inside a single repo: repo:<owner>/<name> in:file extension:ts — saved as a per-repo template for repeated audits. ═══ What it does NOT do ═══ • No background scraping. No content scripts running on page load. No scheduled fetches. • No automation. No clicks, no API calls, no scraping of github.com. • No data leaves your device. Saved searches and settings live in chrome.storage.local. The Export JSON feature writes to a file on your disk; nothing is sent over the network. ═══ Permissions used and why ═══ • storage: Persist user-defined saved searches, tags, and settings locally. • sidePanel: Render the UI as a Chrome side panel so you can keep the Builder open while browsing. ═══ Privacy ═══ Full privacy policy: https://gvensan.github.io/social-chrome-plugins-home/privacy/github.html The extension declares no host permissions and runs no content scripts. It makes no network requests other than navigating tabs to URLs you explicitly composed. ═══ Source & support ═══ Source code: https://github.com/gvensan/social-chrome-plugins Support: https://github.com/gvensan/social-chrome-plugins-home/issues Not affiliated with, endorsed by, or sponsored by GitHub, Inc. or Microsoft.