Chrome Permission Audit

Chrome 'contextMenus' permission explained: right-click AI actions vs keyboard shortcuts.

What does the 'contextMenus' permission allow in Chrome extensions? Learn why it displays no install warning and how right-click menus compare with keyboard shortcuts like Ctrl+Shift+X.

Best fit

Best for users and developers evaluating how Chrome extensions register right-click menu items safely.

Technical Manifest Audit

Permission specification & risk profile.

Review how Chrome enforces contextMenus in Manifest V3 and how to tell legitimate user-triggered extensions apart from intrusive tools.

Risk level: LowercontextMenus
Chrome install-time warning
None (displays no install-time warning in Chrome)
Manifest V3 declaration
{
  "manifest_version": 3,
  "permissions": ["contextMenus", "activeTab"],
  "background": {
    "service_worker": "background.js"
  }
}
Legitimate uses vs. red flags
What to verify before granting this permission to an AI browser tool.

Legitimate AI reading uses

  • Adding an 'Ask AI about selection' item to Chrome's native right-click menu when text is highlighted
  • Providing a mouse-friendly fallback trigger alongside a keyboard shortcut

Red flags to watch for

  • Cluttering the top-level right-click menu with 15 sub-menus on pages where no text is selected
How Vezz me handles this: Vezz me prioritizes an instant, customizable keyboard shortcut (`Ctrl+Shift+X` or `Cmd+Shift+X`) so you never have to open a crowded right-click context menu or deal with floating mouseup icons.
Step-by-step workflow

How to run this workflow in place.

1

Understand what contextMenus can and cannot read

The `contextMenus` permission only lets an extension add an item to Chrome's native right-click menu. It cannot read webpage text until you actually click that menu item.

2

Compare right-click menus vs floating DOM icons

Native Chrome `contextMenus` are much cleaner and safer than extensions that inject floating DOM buttons onto every text selection.

3

Use keyboard shortcuts for 3x faster reading

Pressing `Ctrl+Shift+X` while your hand is already on the keyboard saves right-clicking and hunting through 12 browser menu rows.

Key details

Why this approach works better than switching tabs.

Why contextMenus is one of the safest Chrome permissions
Chrome's `chrome.contextMenus` API is managed entirely by the browser shell outside the webpage DOM.
  • Requires zero content script injection just to display the menu item
  • Passes `info.selectionText` to the extension only when the user explicitly clicks the menu item
  • Triggers an `activeTab` user gesture automatically when clicked
Frequently asked questions

Common questions about chrome permission audit.

Can an extension with contextMenus see what I right-click if I don't click its menu item?

No. The `chrome.contextMenus.onClicked` event only fires when you explicitly click that extension's specific item inside the right-click menu.

Related workflows & guides

Explore connected pages.

activeTab permission
How user-gesture tab permissions work in Chrome.
Open guide
Master permission checker
Compare all Chrome extension permissions.
Open guide
All Extension Security & Permissions
Browse the complete directory of extension security & permissions on Vezz me.
View hub directory
Available for Chrome and Firefox

Ready to try this workflow on your own reading?

Install Vezz me free, highlight text on any webpage, and press your customizable shortcut (default: Ctrl+Shift+X or Cmd+Shift+X on Mac) to get an answer right beside the source.

Install free for ChromeInstall free for FirefoxCompare plans