This extension requests significant permissions. It has 600K+ users, a 4.2 star rating, but review the findings below.
This extension shows some risk signals that are common in legitimate extensions but worth reviewing. Check the details below.
Based on 9 permissions including high-risk ones, 48 code findings, 1 dangerous combination.
Extension uses tab tracking APIs (onUpdated/query) and communicates with external servers — potential browsing surveillance.
2 libraries detected
This extension does not define a Content Security Policy. A CSP helps prevent XSS and code injection attacks.
JavaScript files are accessible to ALL websites. Any page can load and interact with these scripts, enabling web→extension attacks.
Web-accessible resources use <all_urls> or wildcard patterns, exposing resources to every website.
Extension accepts messages from 3 external pattern(s). Verify these are trusted origins.
2 indicators of compromise found