Chrome Extension Developer

VerifiedSafe

Expert in Chrome Extensions using Manifest V3, covering service workers, content scripts, and cross-context communication.

Sby Skills Guide Bot
DevelopmentIntermediate
8/6/2026
Claude CodeCursorWindsurfCopilotCodex
#chrome-extension#manifest-v3#service-workers#message-passing#browser-extension

Recommended for

Automated summary

This skill guides building modern Chrome Extensions with Manifest V3, covering script architecture, cross-context communication, and security best practices.

Strengths

  • Emphasizes Manifest V3 best practices, particularly using service workers over background pages.
  • Clearly explains cross-context communication via message passing.
  • Provides concrete code examples for the manifest and message handling.
  • Highlights security with least-privilege permissions and avoiding eval()/innerHTML.

Limitations

  • Does not cover Safari or Firefox extensions without the WebExtensions API.
  • Provides only basic code snippets, not full extension projects.
  • Mentions declarativeNetRequest but does not go into depth.
When to use it

Use when building, migrating, or debugging Chrome Extensions on Manifest V3.

When not to use it

Do not use for other browser extensions or general web development without extension APIs.

Security analysis

Safe
Quality score88/100

The skill contains only instructional and advisory content for Chrome extension development. There are no executable commands, no dangerous operations (e.g., shell commands, data exfiltration), and no obfuscated payloads. The included code examples are purely demonstrative and safe.

No concerns found

How this analysis is made

Examples

Create MV3 Extension
Create a Chrome Extension using Manifest V3 with a background service worker, a content script, and a popup. Include message passing between the popup and the content script.
Migrate to MV3
Migrate my Chrome extension from Manifest V2 to V3. It currently uses a background page and localStorage. Update it to use a service worker and chrome.storage.
Fix Message Passing
Debug why my content script cannot send a message to the background service worker in Chrome. Show me the correct usage of chrome.tabs.sendMessage.

name: chrome-extension-developer description: "Expert in building Chrome Extensions using Manifest V3. Covers background scripts, service workers, content scripts, and cross-context communication." risk: safe source: community date_added: "2026-02-27"

You are a senior Chrome Extension Developer specializing in modern extension architecture, focusing on Manifest V3, cross-script communication, and production-ready security practices.

Use this skill when

  • Designing and building new Chrome Extensions from scratch
  • Migrating extensions from Manifest V2 to Manifest V3
  • Implementing service workers, content scripts, or popup/options pages
  • Debugging cross-context communication (message passing)
  • Implementing extension-specific APIs (storage, permissions, alarms, side panel)

Do not use this skill when

  • The task is for Safari App Extensions (use safari-extension-expert if available)
  • Developing for Firefox without the WebExtensions API
  • General web development that doesn't interact with extension APIs

Instructions

  1. Manifest V3 Only: Always prioritize Service Workers over Background Pages.
  2. Context Separation: Clearly distinguish between Service Workers (background), Content Scripts (DOM-accessible), and UI contexts (popups, options).
  3. Message Passing: Use chrome.runtime.sendMessage and chrome.tabs.sendMessage for reliable communication. Always use the responseCallback.
  4. Permissions: Follow the principle of least privilege. Use optional_permissions where possible.
  5. Storage: Use chrome.storage.local or chrome.storage.sync for persistent data instead of localStorage.
  6. Declarative APIs: Use declarativeNetRequest for network filtering/modification.

Examples

Example 1: Basic Manifest V3 Structure

{
  "manifest_version": 3,
  "name": "My Agentic Extension",
  "version": "1.0.0",
  "action": {
    "default_popup": "popup.html"
  },
  "background": {
    "service_worker": "background.js"
  },
  "content_scripts": [
    {
      "matches": ["https://*.example.com/*"],
      "js": ["content.js"]
    }
  ],
  "permissions": ["storage", "activeTab"]
}

Example 2: Message Passing Policy

// background.js (Service Worker)
chrome.runtime.onMessage.addListener((message, sender, sendResponse) => {
  if (message.type === "GREET_AGENT") {
    console.log("Received message from content script:", message.data);
    sendResponse({ status: "ACK", reply: "Hello from Background" });
  }
  return true; // Keep message channel open for async response
});

Best Practices

  • ✅ Do: Use chrome.runtime.onInstalled for extension initialization.
  • ✅ Do: Use modern ES modules in scripts if configured in manifest.
  • ✅ Do: Validate external input in content scripts before acting on it.
  • ❌ Don't: Use innerHTML or eval() - prefer textContent and safe DOM APIs.
  • ❌ Don't: Block the main thread in the service worker; it must remain responsive.

Troubleshooting

Problem: Service worker becomes inactive. Solution: Background service workers are ephemeral. Use chrome.alarms for scheduled tasks rather than setTimeout or setInterval which may be killed.

From the file to a first result

The download contains exactly the content displayed on this page. This copy may differ from the latest version in the source repository.

View the source and supporting files

This download contains SKILL.md only. Any scripts, references, templates and dependencies are not included. Get the required files from the source, preserving their directory structure, before continuing.

1. Download the file

Download SKILL.md

From the root of a test project, save the file as .skill-downloads/chrome-extension-developer-msh3utcd/SKILL.md, or use the command below. This folder is for inspecting the skill before installation.

Command for macOS/Linux or WSL: requires a POSIX shell and curl. On Windows without WSL, use the download button and create the folder manually.

mkdir -p '.skill-downloads/chrome-extension-developer-msh3utcd' && curl --fail --show-error --location 'https://skills-guides.com/api/skills/chrome-extension-developer-msh3utcd/download' --output '.skill-downloads/chrome-extension-developer-msh3utcd/SKILL.md.part' && mv '.skill-downloads/chrome-extension-developer-msh3utcd/SKILL.md.part' '.skill-downloads/chrome-extension-developer-msh3utcd/SKILL.md'

2. Check prerequisites

Read SKILL.md before using it. If it references scripts or external services, inspect them and prepare the required access in your test environment.

No recognized prerequisites section in this file. This does not mean it is self-contained: libraries, tools and access requirements may be mentioned elsewhere in the content or source repository.

The platforms on this page are catalog indications. The paths below follow tool documentation; they do not prove this skill has been run in those tools. No minimum tool version is confirmed for this listing.

3. Load the skill

After inspection, copy the complete folder into your project using one of the commands below, then open a new tool session. The command stops if a folder with the same name already exists: compare the files before replacing it.

Claude Code
test -f '.skill-downloads/chrome-extension-developer-msh3utcd/SKILL.md' && test -s '.skill-downloads/chrome-extension-developer-msh3utcd/SKILL.md' && mkdir -p '.claude/skills' && test ! -e '.claude/skills/chrome-extension-developer' && cp -R '.skill-downloads/chrome-extension-developer-msh3utcd' '.claude/skills/chrome-extension-developer'

Cursor
test -f '.skill-downloads/chrome-extension-developer-msh3utcd/SKILL.md' && test -s '.skill-downloads/chrome-extension-developer-msh3utcd/SKILL.md' && mkdir -p '.cursor/skills' && test ! -e '.cursor/skills/chrome-extension-developer' && cp -R '.skill-downloads/chrome-extension-developer-msh3utcd' '.cursor/skills/chrome-extension-developer'

Codex
test -f '.skill-downloads/chrome-extension-developer-msh3utcd/SKILL.md' && test -s '.skill-downloads/chrome-extension-developer-msh3utcd/SKILL.md' && mkdir -p '.agents/skills' && test ! -e '.agents/skills/chrome-extension-developer' && cp -R '.skill-downloads/chrome-extension-developer-msh3utcd' '.agents/skills/chrome-extension-developer'

OpenSkills

OpenSkills must already be installed. The local install/read procedure is checked with OpenSkills 1.5.0, which requires Node.js ≥ 20.6.0. Catalog slugs are not resolved automatically.

Official OpenSkills installation
openskills install './.skill-downloads/chrome-extension-developer-msh3utcd'

openskills read 'chrome-extension-developer-msh3utcd'

Reading should display the installed file content and its base directory. It does not run the skill or install its dependencies.

For an agent that reads AGENTS.md, then sync the index. This command changes AGENTS.md: review the diff before using it.

openskills sync

Manual method or another tool: attach SKILL.md to a conversation, or open it in an agent that can read files. Include any required supporting resources. No universal folder is recognized by every tool.

4. Try a first task

Use a short, synthetic input: an API endpoint, a small document or an interface brief. In a new conversation, attach the file or give the agent its path, then adapt this request:

Read .skill-downloads/chrome-extension-developer-msh3utcd/SKILL.md and apply its instructions to this example: [describe a test input]. Identify any missing files, dependencies or access. Produce the result requested by the skill without inventing data or running unreviewed scripts.

Expected result: output matching the skill instructions, or a precise list of missing prerequisites. A read confirmation alone does not validate a first use. If an external resource is unavailable, that path remains untested.

Related skills