diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 59f6b5a..514de4d 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -66,6 +66,10 @@ jobs:
       - name: Build the extension
         run: npm run build && npm run build:firefox
 
+      # patch for plasmo bug
+      - name: remove unused permissions
+        run: npm run remove-permissions
+
       - name: Package the extension into a zip artifact
         run: npm run package && npm run package:firefox
 
diff --git a/package.json b/package.json
index fac3076..028b4c8 100644
--- a/package.json
+++ b/package.json
@@ -13,7 +13,8 @@
     "run-client": "ts-node --project tsconfig.script.json scripts/client.ts",
     "check": "npx @biomejs/biome check --apply-unsafe ./src",
     "storybook": "storybook dev -p 6006",
-    "build-storybook": "storybook build"
+    "build-storybook": "storybook build",
+    "remove-permissions": "node scripts/remove_web_accessible_resources.js"
   },
   "dependencies": {
     "@atproto/api": "^0.7.4",
@@ -67,7 +68,8 @@
           "mac": "Alt+B"
         }
       }
-    }
+    },
+    "web_accessible_resources": []
   },
   "volta": {
     "node": "16.20.0"
diff --git a/scripts/remove_web_accessible_resources.js b/scripts/remove_web_accessible_resources.js
new file mode 100644
index 0000000..f442158
--- /dev/null
+++ b/scripts/remove_web_accessible_resources.js
@@ -0,0 +1,11 @@
+const fs = require('fs');
+
+const manifestPath = './build/chrome-mv3-prod/manifest.json';
+
+const manifestData = fs.readFileSync(manifestPath);
+
+const manifestObj = JSON.parse(manifestData);
+
+delete manifestObj['web_accessible_resources'];
+
+fs.writeFileSync(manifestPath, JSON.stringify(manifestObj, null, 2));