Контур.ПлагинSecurity Analysis

Chromev3.1.7MV3February 18, 2026 at 11:40 AM
Use with caution

This extension requests significant permissions. It has 1M+ users, is published by PF SKB KONTUR, AO, but review the findings below.

4.1MEDIUM
4.1 MEDIUMRaw: 4.6

This extension shows some risk signals that are common in legitimate extensions but worth reviewing. Check the details below.

Based on 4 permissions including high-risk ones, 4 code findings.

Trust Signals(3.5/10)

Users
1.0M
Rating
4.3(72 reviews)
Developer
PF SKB KONTUR, AO
Permissions
8.0/10
Code
4.6/10
Combinations
0.0/10
Manifest/CSP
3.9/10

Permissions(4 analyzed)

Code Findings(4 patterns, 4 total)

Content Security Policy

No CSP Defined(1 issue)
MEDIUM
N/ANo CSP defined

This extension does not define a Content Security Policy. A CSP helps prevent XSS and code injection attacks.

Manifest Analysis(1 finding)

HIGH
content_scriptsAggressive content script injection

Content script runs at document_start in ALL frames on ALL URLs. This gives the extension deep access to every page load, including iframes.

External Domains(3)

addons.opera.comchromewebstore.google.commicrosoftedge.microsoft.com

Indicators of Compromise

4 indicators of compromise found

File Statistics

7
Total Files
2
JS Files
15.6 KB
Total Size

Other Scanned Extensions