Version 1.1 View in Chrome Web Store
The extension has a moderate rating of 3.8 stars from 176 users, indicating mixed user experiences. However, several concerning factors affect trustworthiness: missing critical metadata including user count, last update date, author information, and developer details. This lack of transparency raises questions about the extension's maintenance and legitimacy. The extension targets Gmail's discontinued Inbox service, which Google shut down in 2019, making its current utility questionable.
The permission set appears excessive for a simple app launcher. Audio and video capture permissions (audioCapture, videoCapture) are particularly concerning as they're unnecessary for launching Gmail applications and could enable unauthorized recording. The webview permission allows embedding external web content, creating potential security vulnerabilities. The extension uses the older Manifest V2, which has weaker security protections than the current V3 standard. The targeting of a discontinued Google service suggests the extension may be outdated or potentially repurposed for other activities.
Consider running this extension in a separate Chrome profile to isolate potential risks. Verify the extension's current functionality since Inbox by Gmail no longer exists. Look for alternative, actively maintained Gmail extensions with more appropriate permission sets. Monitor the extension's behavior closely, particularly any unexpected audio/video access requests. Consider uninstalling if the extension doesn't provide clear value for current Gmail usage.
| http://fsf.org/ | http://www.gnu.org/licenses/ | |
| http://www.gnu.org/philosophy/why-not-lgpl.html | http://developer.chrome.com/apps/app.runtime.html | |
| http://developer.chrome.com/apps/app.window.html | https://clients2.google.com/service/update2/crx | |
| https://chrome.google.com/webstore/detail/inbox/ | https://raw.github.com/GoogleChrome/chrome-app-samples/master/tryitnowbutton.png | |
| http://inbox.google.com | http://goo.gl/JRgPWd | |
| http://scan.me/m9ksx8p |
{ "app": { "background": { "scripts": [ "main.js" ] } }, "name": "App Launcher for Inbox by Gmail App", "icons": { "16": "icon_16.png", "128": "icon_128.png" }, "author": "Akmal Razali", "version": "1.1", "short_name": "Inbox", "update_url": "https://clients2.google.com/service/update2/crx", "description": "__MSG_appDesc__", "permissions": [ "audio", "audioCapture", "notifications", "videoCapture", "webview", "storage", "notifications" ], "default_locale": "en", "manifest_version": 2, "minimum_chrome_version": "36.0" }
ⓘ CRXaminer has partnered with our friends at Secure Annex to provide additional findings unique to their platform.
Secure Annex also analyzes extensions from other browsers, IDEs, and can continuously monitor.
This extension may not yet be analyzed by Secure Annex.