Point & Shoot Chrome extension security report

Point & Shoot is a browser extension that allows you to point at a UI problem, capture its visual and structural evidence, and export a fix-ready prompt for your coding agent. The workflow is simple: * **Point:** Start a capture using the browser toolbar or a keyboard shortcut, then point at a broken element or drag around a visible region. * **Shoot:** Add a note describing what needs to be changed. Repeat this process across as many pages and problems as necessary. * **Review:** Review the session in the browser side panel and choose which notes to include. Each capture bundles vital context, including a screenshot, page URL, selector fallbacks, relevant DOM text and metadata, a bounded computed-style digest, capture geometry, and your written notes. * **Export:** Compile this evidence into an agent-readable Markdown prompt or download a ZIP file containing the canonical session, prompt, and referenced screenshots. The extension is completely private by design, keeping all data strictly on your device. It never uploads your captures, notes, screenshots, browsing information, or exported bundles. Point & Shoot only requests temporary access to your active tab after you invoke it, avoiding the need for persistent access to every site, and all executable code is packaged directly within the extension. Currently, the extension supports capturing annotated UI evidence and exporting local fix prompts from Chrome (version 116 or newer) and Firefox (version 109 or newer), as well as other Chromium- and Gecko-based browsers. Safari support is planned for the future. For more information or to get help, refer to the following resources: * **Documentation:** [https://pointandshoot.app/docs/](https://pointandshoot.app/docs/) * **Privacy Policy:** [https://pointandshoot.app/privacy/](https://pointandshoot.app/privacy/) * **Source Code:** [https://github.com/whizzzkid/point-and-shoot](https://github.com/whizzzkid/point-and-shoot) * **Support:** Send inquiries to support@pointandshoot.app