permission-delta
Privilege expansion between two manifests: npm, Chrome extension, Android — Compares an old and a new manifest and reports every way the new one gains privilege, for agents reviewing dependency bumps and extension or app updates. npm package.json: new or changed install-time lifecycle scripts, gypfile, bin entries and URL/git/file dependencies (including overrides). Chrome manifest.json: added permissions with Chrome's own warning text, host access not covered by the old
Tool call template
Replace each placeholder with a value matching the input schema. Only required parameters are included; add optional parameters as needed.
{
"id": 1,
"jsonrpc": "2.0",
"method": "tools/call",
"params": {
"arguments": {
"kind": "<kind>",
"before": "<before>",
"after": "<after>"
},
"name": "permission-delta"
}
}Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| kind | Yes | Manifest format of both documents. | |
| after | Yes | New manifest text. | |
| before | Yes | Old manifest text (package.json, manifest.json or AndroidManifest.xml). | |
| threshold | No | any (default): every added permission fails. sensitive: ignore Chrome permissions without a warning and Android normal permissions. |