AI agents can build Chrome extensions surprisingly fast.

After shipping eight extensions, though, I found that the biggest risks usually do not come from whether the code runs.

They come from what the agent quietly adds while trying to be helpful:

another permission

an external request