Unapproved Browser Extension Requesting Host Access to AI Assistant Domains (Claude Extension Trust-Bypass Exposure)

Nagesh Venkataram@Nagesh

•updated Jul 18, 2026•45•0•57

This rule detects the installation of browser extensions that request host permissions for major AI services (Claude, ChatGPT, Gemini, Copilot). It filters out pre-approved extension IDs to highlight potentially unauthorized or malicious extensions that may be used to intercept sensitive user interactions, prompts, or AI-generated data.