[ new scan ] [ statistics ] [ github ] [ twitter ] [ help ]

BriefMe: Your Document, Simplified and Explained

Version 1.3.6 View in Chrome Web Store

Last scanned: about 12 hours ago

Extension Details

Rating: 4.0 ★ (7 ratings)

Users: 972

Context-Aware Verdict

MEDIUM

Overall Risk

Based on 2 total findings, including 1 high-risk finding.

Findings

HIGH

Broad Host Permissions

This extension has broad host permissions allowing it to access many or all websites. This could potentially be used to steal sensitive data or track browsing activity.

MEDIUM

Access to Sensitive Domains

This extension requests access to sensitive domains: *://mail.google.com/*. Ensure you trust this extension with access to these sites.

Security Analysis Details

Host Permissions:

*://mail.google.com/*

Embedded URLs (18 total):

https://briefmein.com	http://www.w3.org/2000/svg
https://www.briefmein.com/?	https://www.briefmein.com
https://clients2.google.com/service/update2/crx	https://www.briefmein.com/privacy
https://www.briefmein.com/tou	https://www.briefmein.com/
https://rive.app	https://github.com/rive-app/rive-wasm/tree/master/js
https://stackoverflow.com/questions/9656990/how-to-prevent-simulated-mouse-events-in-mobile-browsers	https://stackoverflow.com/questions/25572070/javascript-touchend-versus-click-dilemma
https://github.com/rive-app/rive-cpp/blob/master/src/animation/state_machine_instance.cpp#L336	https://github.com/braintree/sanitize-url/tree/main
https://stackoverflow.com/a/29824550/2601552	https://cdn.jsdelivr.net/npm/
https://unpkg.com/	https://developer.mozilla.org/en-US/docs/Web/API/Canvas_API/Tutorial/Basic_animations

Raw Manifest

{
  "name": "BriefMe: Your Document, Simplified and Explained",
  "icons": {
    "16": "static/16px.png",
    "32": "static/32px.png",
    "48": "static/48px.png",
    "128": "static/128px.png"
  },
  "action": {
    "default_icon": {
      "16": "static/16px.png",
      "32": "static/32px.png",
      "48": "static/48px.png",
      "128": "static/128px.png"
    },
    "default_popup": "popup.html",
    "default_title": "BriefMe - Start Chatting"
  },
  "version": "1.3.6",
  "background": {
    "service_worker": "background.js"
  },
  "update_url": "https://clients2.google.com/service/update2/crx",
  "description": "BriefMe uses advanced AI to deliver instant summaries and key insights from your documents",
  "content_scripts": [
    {
      "js": [
        "rive.js",
        "content.js"
      ],
      "matches": [
        "*://mail.google.com/*"
      ]
    }
  ],
  "host_permissions": [
    "*://mail.google.com/*"
  ],
  "manifest_version": 3,
  "web_accessible_resources": [
    {
      "matches": [
        "*://mail.google.com/*"
      ],
      "resources": [
        "vehicles.riv",
        "rive.wasm"
      ]
    }
  ]
}

by ✦ Astarte