I build a chrome extension as isolated iframe, which gets injected to a website via the content.js script. The user can access the extension via a shortcut. So
content.js