chrome-web-store-playbook SKILL.md skillB
chrome-web-store-playbook from samber/developer-platform-skills is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add samber/developer-platform-skills/chrome-web-store-playbook@v1.0.0Pins v1.0.0 in mdr.lock. Pin the fingerprint instead.
- Audit grade
- B, 16 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- samber/developer-platform-skills
- Path
skills/chrome-web-store-playbook/SKILL.md- Versions recorded
- 2
- Latest version
- v1.0.0, committed Nov 1, 2026
- First version recorded
- Nov 1, 2026
- Size
- 12,708 bytes
- Repository stars
- 9
- License
- MIT
Gets a B2B SaaS or developer-tools vendor's companion Chrome extension through Chrome Web Store review and keeps it published - permission scoping, reviewer access to login-gated features, the Privacy practices tab, violation IDs such as Purple Potassium, permission changes in updates, rollout and rollback, publisher-account security, per-customer and enterprise distribution. Use whenever a vendor mentions publishing a Chrome extension, a Chrome Web Store rejection or takedown, the item limit…
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# Chrome Web Store playbook You take a vendor's companion extension through Chrome Web Store review and keep it live. Review reads three things against each other: the code, the declared permissions, and what the listing and Privacy tab claim. Any mismatch is a rejection. Mark every figure and every practitioner-reported behaviour you quote with `†`: verify against current Chrome Web Store docs, which changed the item limit and badges in 2026. ## Rules review enforces 1. Request the narrowest permission per feature. Reviewers assume you use every permission; an unused one (`tabs` beside broad host access or `activeTab`, `cookies` for `document.cookie`) returns **Purple Potassium**. Never add a permission for a feature not yet shipped. 2. Ship all extension logic inside the package. Remote config, data and images are fine; a CDN `<script>`, `eval` of fetched code, or an SDK that lazy-loads scripts returns **Blue Argon**. An iframe or sandboxed page showing your web app is exempt, but its behaviour must still be reviewable and disclosed. 3. Minify at most, never obfuscate (**Red Titanium**). Legacy polyfills and old async helpers have been flagged†: target modern Chrome. …
Read the whole file at its exact version.
How to install
mdr add samber/developer-platform-skills/chrome-web-store-playbook@sha256:c19c52464c9f32a9The line at the top of this page pins the label v1.0.0, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_rqkaiplyrcw6t7wg)
2 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 2 versions of this file, all committed on Nov 1, 2026.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| v1.0.0 latest | 2026-11-01 | bd21e2a | 12,708 B | B | view · diff |
| v1.0.0 | 2026-11-01 | 3454eb1 | 12,672 B | B | view |
Audit of the latest version
- fail: No script tag (matched: <script)
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (12708 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
Starting a new one? Use a template for SKILL.md on mdpantry, which passes every one of these checks and says what to change in it.
Source
samber/developer-platform-skills · 9 stars · license MIT · pushed 2026-11-01 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_rqkaiplyrcw6t7wg GET https://markdownregistry.com/api/v1/resolve?ref=samber/developer-platform-skills/chrome-web-store-playbook GET https://markdownregistry.com/api/v1/blob/c19c52464c9f32a93f240cf83402eaedc0d5ae889b37625768617be4f53d08dd
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.