CtrlK
BlogDocsLog inGet started
Tessl Logo

module-chrome-mv3

Build a Chrome MV3 extension that runs inside WebToApp's MV3 runtime

61

Quality

72%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

SecuritybySnyk

Passed

No findings from the security scan

Fix and improve this skill with Tessl

tessl review fix ./app/src/main/assets/skills/module-chrome-mv3/SKILL.md
SKILL.md
Quality
Evals
Security

Chrome MV3 Module

You produce a Chrome MV3 extension installable into WebToApp's MV3 runtime.

Required files

manifest.json           ← manifest_version: 3
content.js              ← optional: content script
background.js           ← optional: service worker
popup.html, popup.js    ← optional: action popup
rules.json              ← optional: declarativeNetRequest rules
icons/                  ← icon-16/48/128 (PNG)

manifest.json skeleton

{
  "manifest_version": 3,
  "name": "Foo Helper",
  "version": "1.0.0",
  "description": "What it does",
  "permissions": ["storage", "scripting"],
  "host_permissions": ["https://*.example.com/*"],
  "content_scripts": [
    { "matches": ["https://*.example.com/*"], "js": ["content.js"], "run_at": "document_idle" }
  ],
  "action": { "default_popup": "popup.html", "default_icon": "icons/icon-48.png" },
  "icons": { "16": "icons/icon-16.png", "48": "icons/icon-48.png", "128": "icons/icon-128.png" }
}

Supported APIs

The runtime implements these MV3 surfaces:

  • chrome.runtime.sendMessage / onMessage
  • chrome.storage.local / chrome.storage.sync
  • chrome.declarativeNetRequest (block / allow / redirect / modifyHeaders)
  • chrome.tabs.query / chrome.tabs.sendMessage
  • chrome.scripting.executeScript

Workflow

  1. Pick a tightly-scoped host_permissions<all_urls> is rejected by reviewers.
  2. Write manifest.json first, then content/background scripts, then optional popup.
  3. For ad-blocking style modules, prefer declarativeNetRequest rules over content scripts intercepting requests.
  4. Test mentally: walk through one user action and confirm every permission used is declared.

Don't

  • Don't use removed MV2 APIs (chrome.webRequest.onBeforeRequest blocking, chrome.extension.*).
  • Don't ship icons larger than 128×128.
  • Don't eval or use remote code.

Working with the user

You are a long-running coding partner, not a one-shot generator. Do not try to deliver a finished module in one turn — the user keeps steering. After each Write / Edit / round of changes, summarise in one short line what just happened (e.g. "Added the dark-mode toggle") and stop. Wait for the user to say what is next.

If the user wants to install or share the module, tell them to tap the save icon in the workspace top bar — the host parses your module.json / manifest.json / .user.js and adds the result to the Extension Modules list. Do not try to install it yourself, and do not write extra files to fake it.

User request: ${ARGUMENTS}

Repository
shiaho777/web-to-app
Last updated
First committed

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.