In context
Stay with the page.
A short illustration of two ways to move from page content into the Coeus side panel.
The product, in context
example.org/security/advisory
Security advisory / Example
Reviewing an unusual command
powershell.exe -EncodedCommand VwByAGkAdABlAC0ATwB1AHQAcAB1AHQA...
The page remains yours to read and use.
COEUS
Tools / Text Decoder
Encoded command
Input found on this page
powershell.exe -EncodedCommand VwByAGkAdABlAC0A...
Decoded locally
Write-Output "https://example.org/login"
URL found · Ready to inspect
Shortcuts
What the keyboard does.
| Command | Windows and Linux | macOS | Does |
|---|---|---|---|
| scan-page | Ctrl⇧K | ⌘⇧K | Inspect this page with Coeus tools |
| open-dashboard | unset | unset | Open Coeus tools |
| _execute_action | Ctrl⇧U | ⌘⇧U | Open the Coeus side panel |
Permissions
What it can access, and why.
Each permission Coeus requests, with the reason given in its Chrome Web Store listing.
| Permission | Why |
|---|---|
| contextMenus | Send selected text and images to local tools, open matching source links and inspect the current page for tool inputs. |
| storage | Settings, favourites, custom sources, source overrides and compatibility with previously saved records. Tool drafts and raw page selections are not persisted by these new flows. No source API keys. |
| tabs, tabGroups | Open and reuse source tabs grouped by lookup, associate a tool handoff with its originating tab and isolate windows. Existing source-capture APIs remain compatible with older clients. |
| alarms | Maintain source-content refresh schedules and timed keep-awake release. Forever keep-awake has no expiry alarm. |
| power | The optional keep-screen-awake setting, including timed and Forever modes. |
| sidePanel | Show local security tools and source controls beside the current page. |
| scripting, activeTab | Read bounded selected or visible page content when requested; supply enabled suggestions and the opt-in HTTP password-form notice without reading typed password values. Existing capture APIs retain their packaged reader behavior. |
| offscreen | Retained compatibility reader APIs parse fetched source HTML in an offscreen document. New tool analysis uses local parsers/workers in the served UI. |
| unlimitedStorage | Preserve existing local saved records, indexes and source caches without imposing a new storage cap on upgrades. No install warning. |
| host_permissions (`<all_urls>`) | Existing broad website access is unchanged. Investigators use advisories, tickets and source sites across arbitrary hosts; packaged on-demand readers and optional page suggestions/notices inspect bounded content there. Users can withhold access through browser site settings. Restricted browser pages are unavailable. No static content scripts are registered by this candidate. The isolated coeus.tools UI frame has no extension privileges and communicates only through validated messages. |
