maybe its time for a LLM based security review open source framework. this could be adapted for extensions to see what information they'd be sending over.