What can these permissions do?

Paste an extension manifest.json, or a comma or space separated list of permissions. Each one comes back with a risk level and a plain-language note on why it matters. Parsing runs in your browser, so only the permission names ever leave it.