Chrome Web Store

You can do it on your PC by enabling chrome://flags/#extensions-on-chrome-urls and adding the necessary url, chrome://extensions/, into "matches" in manifest.json but such extension won't be possible to install on a normal browser due to an invalid scheme error.

To avoid the fatal error, don't use manifest.json to inject the content script/style, do it manually in the background or popup script via chrome.tabs.insertCSS or chrome.tabs.executeScript:

• chrome://flags: enable Extensions on chrome:// URLs flag

• manifest.json:

  "permissions": ["chrome://*/*", "tabs"],
  "background": {
      "scripts": ["background.js"]
  },
  

• background.js:

  var chromeURLstylable;
  chrome.permissions.contains({origins: ["chrome://*/*"], permissions: ["tabs"]}, function(state) {
      chromeURLstylable = state;
      console.log("chrome:// urls support", state);
  
      if (chromeURLstylable) {
          chrome.tabs.onUpdated.addListener(function(tabId, info, tab) {
              if (info.status == "loading" && tab.url.indexOf("chrome://") == 0) {
                  chrome.tabs.insertCSS({
                      file: "style.css", 
                      runAt: "document_start",
                      allFrames: true
                  });
              }
          });
      }
  });
  

Beware of possible problems submitting such extension to the Chrome Webstore.

If you don't mind installing an extra extension, this might be useful: Extension Manager

I was looking for a solution to the same problem. I only need to disable the extension on a single domain, whitelisting all other domains would not be a good idea. So I found this extension allows you to create rules, which you can use it as a blacklist.

Example

1. Send a list of all the websites I visit to the maker?

   Yes

2. Capture data I input into forms? (like my personal data, passwords, etc.)

   Yes

3. See how long I have been on a website, and which pages I have visited?

   Yes

4. Access cookies?

   Updated, See the following comment from Bryan Field for this one.

   Bryan Field: Great answer, except for number 4. Cookies without the httponly flag can be accessed for sure, beyond that I don't know. I would add that it is likely that the extension could manually call, for example your Gmail page and get all your emails, even if you do not have Gmail open during the time the extension is opened. You need only to be logged in and it can call those pages. So even if the httponly cookies can not be directly viewed (number 4), it doesn't really matter, because the cookies can still be indirectly and effectively used

5. Access other files on my computer? (I guess not, given the Sandbox environment, but I'm still wondering)

   No – like you say the sandbox will prevent that.

6. Do anything worse?

   Read (and send) data on all the pages you visit.

Some more details on why this is often needed, but not always is discussed in this question Why do Chrome extensions need access to 'all my data' and 'browsing activity'?