drop 2+ browser extension exports · correlate extension id + permission overlap · runs locally
drop 2+ browser extension exports · local only
heuristic screener · vendor schema varies · not definitive proof