What is Permission manifest?
A permission manifest is a file in which software declares ahead of time the capabilities and resources it needs, so a user or platform can review and grant them.
Also written: manifest permissions, extension permissions, declared permissions
Explained
The cited Chrome page does not use the phrase permission manifest. The term is used here for a general pattern, and that page is one concrete example of it: the Chrome extension documentation on declaring permissions in manifest.json. Treat it as an illustration of the pattern, not a definition shared by all platforms.
In that example, an extension lists what it needs in separate manifest fields. The permissions field holds entries from a list of known strings. The host_permissions field holds match patterns that give access to specific sites. The optional_permissions field covers access that the user grants while the extension is running, rather than at install time. The page recommends optional permissions wherever the functionality allows, so users stay informed and in control.
Declared permissions also drive what users see. Some permissions produce warnings at installation or at runtime, and the page says adding or changing host match patterns can trigger a warning. It also says that fewer warnings tend to build more user trust in an extension.
Primary source
Declare permissions | Chrome Extensions | Chrome for Developers (developer.chrome.com), read Oct 26, 2026
This entry paraphrases the page above. Sources change; check it for the current wording.
Listings that use this
The 5 top-ranked listings tagged for Permission manifest. Rank weighs adoption, freshness, documentation and publisher identity; how we rank and grade. Money never changes the order.
- 0.876score
aws-iam
devops-skills
Manage IAM users, roles, and policies.
SkillAFreshness: A★ 48.4KClaude Code +9 - 0.875score
ai-agent-security
devops-skills
Secure AI agents against prompt injection, tool abuse, and data exfiltration with defense-in-depth controls.
SkillAFreshness: A★ 48.4KClaude Code +9 - 0.851score
cloud-attack-methods
AIPentest
云攻击:元数据API,S3/K8s,AWS/Azure/GCP身份提权,MinIO矩阵,阿里云FC,ChengZi SDK解密。Use when attacking cloud metadata, IAM, K8s, MinIO, Aliyun FC, or cloud post-ex.
SkillAFreshness: A★ 8KClaude Code +9 - 0.851score
web-attack-methods
AIPentest
Web全栈攻击:SQLi/命令注入/SSTI/XSS/SSRF/NoSQL,认证JWT/OAuth/SAML,LFI/上传,Tomcat/WS/STOMP/XFF/PATH_INFO/CDN502/网宿JS挑战绕过。Use when testing Web injection, auth bypass…
SkillAFreshness: A★ 8KClaude Code +9 - 0.849score
indirect-injection-detection
TencentOfficial
Detect indirect prompt injection (goal hijack).
SkillAFreshness: A★ 7.1KClaude Code +9
Related
Cite this page
What is Permission manifest?. Agent Mart. https://agentmart.dev/glossary/permission-manifest (last updated 2026-10-26)
Written Oct 26, 2026, updated Oct 26, 2026. All glossary terms