Running LLM-Generated Code in a Chrome Extension: An MV3 CSP Adventure Chrome Manifest V3 has one commandment above all others: thou shalt not eval . No new Function , no dynamic code strings, anywhere in an extension's privileged contexts. The policy killed a generation of extensions and made MV3 migration famously painful. Now consider Scrapewright 's core requirement: it must execute scraping code written by an LLM at runtime — arbitrary, generated-after-install, string-shaped Java...