CRX aminer
Extension icon

GitHub DeepWiki Button (Unofficial)

Version 1.0.4 View in Chrome Web Store

Last scanned: about 2 hours ago

Extension Details

Rating: 5.0 ★ (4 ratings)
Users: 1,000

Context-Aware Verdict

MEDIUM
Overall Risk
Trust Factors:

The extension has a perfect 5.0 rating, though based on only 4 reviews, which limits reliability. With 1,000 users, it has modest adoption but lacks extensive community validation. The unofficial nature and absence of clear developer information raises transparency concerns. The specific focus on GitHub integration suggests legitimate functionality, but the limited user base and review count make it difficult to establish strong trust.

Concerns:

The extension requests scripting permissions and host access specifically to GitHub, which aligns with its stated purpose of adding DeepWiki functionality. However, the broad host permissions flag indicates potential for data access beyond what's necessary. The lack of developer information makes it difficult to verify the creator's reputation or intentions. The "unofficial" designation means it's not endorsed by GitHub or DeepWiki, adding uncertainty about ongoing support and security updates.

Recommendations:

Consider running this extension in a separate Chrome profile dedicated to development work if you frequently use GitHub and find the DeepWiki integration valuable. Monitor the extension's behavior and disable it if you notice any unexpected activity. Look for official alternatives or more established extensions with similar functionality. Given the medium risk and limited trust factors, only install if the DeepWiki integration is essential to your workflow, and regularly review whether continued use is justified.

Findings

HIGH
Broad Host Permissions
This extension has broad host permissions allowing it to access many or all websites. This could potentially be used to steal sensitive data or track browsing activity.
MEDIUM
Access to Sensitive Domains
This extension requests access to sensitive domains: https://github.com/*. Ensure you trust this extension with access to these sites.