Claude for Chrome flaw lets rogue extensions read Gmail

The flaw allows any browser extension with script access on claude.ai to trigger Claude for Chrome tasks on Gmail, Google Docs, and Calendar. It requires a rogue extension already able to run scripts on claude.ai.