Chromium uses the same extensions engine as Chrome, and so has the same vulnerability.
If you want to know what they're doing, just look in them.
Chrome extensions are a collection of javascript, css, json and html files - i.e. web pages. Now, you can do a lot with javascript, and it can be...