Macros Chrome extension security report

Macros — Nutrition grid for your grocery shopping. Browse any category on Wolt Market and click "Show nutrition table" to see every product's calories, protein, fat, carbohydrates, and fiber — all in one sortable, filterable table. FEATURES - Nutrition table overlay — see kcal, protein, fat, carbs, and fiber for every product in a category - Smart scoring — rank products using built-in presets: High Protein, Low Carb, or Balanced - Custom scoring — create your own formula by adjusting 6 nutrient weight sliders - Range filters — set minimum protein/fiber and maximum fat/carb thresholds - Text search — instantly filter products by name - Product images and prices shown alongside nutrition data - Click any row to open the product on Wolt - Fast — nutrition data is cached locally for instant revisits - Private — no data collection, no analytics, no tracking HOW IT WORKS Navigate to any Wolt Market venue page and browse a category. A floating "Show nutrition table" button appears. Click it to open the nutrition table. Sort by any column, apply filters, or use scoring presets to find products that match your dietary goals. The extension reads product data directly from Wolt's own APIs. No external servers are involved — everything runs locally in your browser. SUPPORTED STORES Currently supports Wolt Market (wolt.com). PERMISSIONS - Storage: saves your score preset and custom weight preferences - Wolt domains: reads product listings and nutrition information from Wolt's APIs How to test: 1. Install the extension 2. Navigate to a Wolt Market venue page, e.g.: https://wolt.com/en/fin/helsinki/venue/wolt-market-vallila/items/meijerituotteet-munat-100 3. Wait for the page to load — a floating "Show nutrition table" button appears at the bottom-right 4. Click the button to open the nutrition table 5. Try sorting columns, using the search bar, or switching score presets Technical details: - The extension intercepts Wolt's own category API responses (via fetch patching in MAIN world) to capture product data as it loads - Product nutrition info is fetched from prodinfo.wolt.com (Wolt's own nutrition service) via the background service worker (required for CORS) - No remote code execution, no eval(), no external servers - All data processing happens locally in the browser - User preferences (score preset, custom weights) are stored via chrome.storage.local