Ahead of the holiday season, cloud application security firm Instart has released a plugin for the Chrome browser that can detect if card-skimming or other privacy violating code has been inserted into a site.