Chrome Web Store
2Versions
0Code reviewed

Not reviewed

No code review on record

We have not reviewed this extension’s code, so we cannot vouch for it either way. Check the permissions below to decide whether it asks for more than it needs.

Want us to read this extension's code? Ask for a review and we'll queue it.

24 indicators in this extension

24 indicators
0 versions analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

What our analysis found

gRPC-Web DevTools for QA is not yet reviewed by Extension Auditor. Its permissions mean it can read and change data on all websites. It comes from a publisher with 4 extensions and was last updated in September 2026.

gRPC-Web DevTools for QA

gRPC-Web DevTools for QA Chrome extension security report

ID: hhbbdedbghoeiapkjffnknfbhidongbj

Supported Languages

🇺🇸English

Extension Info & Metadata

Status
Active
Version
1.5.0
Size
1.48 MB
Rating
5.0/5
Reviews
1
Users
7
Type
Extension
Updated
Sep 23, 2026
Category
Developer tools
Price
Free
Featured
No
Visibility
Listed
Mature
No
By Google
No
Trusted
No
This publisherTrack record
4extensions
1 no longer listed

Publisher Contextual Analysis

Author
DH
Website
Visit
Extensions
4
Active
3
Obsolete
1
Listed
2
Unlisted
2
Users
6,100

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Screenshots & videos

Screenshot 1

Install growth

Item
Type
Severity
Description
debugger
Permission
Critical
This permission grants the extension ability to debug and control other extensions and browser tabs. Rated Critical because it can access and modify other extensions' internal state, inject code, and access sensitive data from any tab.
<all_urls>
Risk Factor
Critical
This permission grants access to all websites without restriction. Rated High because it can access any web content, monitor all web activity, and potentially steal sensitive data across all sites.
Contextual Risk Factors
Risk Factor
High
The following context increases the overall risk:• 10% increase: Early script execution enables pre-emptive content manipulation• 25% increase: Unsafe code evaluation capabilities increase attack surface
Broad Host Permissions
Risk Factor
High
This extension has broad host permissions allowing it to access many or all websites.
Broad Content Script Access
Risk Factor
High
This extension can inject scripts into any website.
Unsafe WebAssembly Execution
Risk Factor
High
This extension's CSP allows "wasm-unsafe-eval".
storage
Permission
Medium
This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
Early Content Script Execution
Risk Factor
Medium
This extension runs content scripts at document_start.

24 indicators in this extension

24 indicators
0 versions analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

About this extension

A Chrome DevTools extension for debugging gRPC-Web requests. Capture, Repeat, and Edit & Repeat without uploading proto files.

Read the publisher’s full description

gRPC-Web DevTools for QA adds a dedicated panel to Chrome DevTools for inspecting and debugging gRPC-Web network requests — designed especially for QA engineers who need to replay and modify API calls without backend access. —————————————————— KEY FEATURES —————————————————— ▸ Zero-config Capture Automatically captures gRPC-Web requests as JSON as soon as the page loads. No setup, no proto file upload required. ▸ Repeat Resend any captured request with one click. Authentication headers and session context are preserved automatically. ▸ Edit & Repeat Modify request fields directly in the JSON editor and resend. No proto file needed — the app's own compiled types handle encoding behind the scenes. ▸ Proto File Upload (Optional) Upload .proto files to enable response decoding, field type hints, and grpcurl command generation for terminal use. ▸ Request Templates Save frequently used requests as templates and reload them across sessions. ▸ Load Testing Send the same request repeatedly with configurable concurrency to simulate load. ▸ Streaming Visualizer Inspect server-streaming RPC responses message by message in real time. —————————————————— SUPPORTED LIBRARIES —————————————————— • @improbable-eng/grpc-web • @connectrpc/connect-web • @protobuf-ts/grpcweb-transport —————————————————— SOURCE —————————————————— Based on SafetyCulture/grpc-web-devtools (MIT License). Extended with QA-focused features including proto-free Edit & Repeat and protobuf-ts support.

User reviews

Extension files

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs
24

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

No URLs found
No IP addresses found

24 indicators in this extension

24 indicators
0 versions analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe
Version
Size
Verdict
Findings
Permhash
1.5.0
Latest
1.48 MBNot scanned—
a4e76a72f27801ce56f6591da55a00c3594aa6e848593cfada8168ce03c5b603
1.4.1
0.90 MBNot scanned—
a4e76a72f27801ce56f6591da55a00c3594aa6e848593cfada8168ce03c5b603
Showing 1 to 2 of 10 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.