CRX aminer
Extension icon

App Launcher for Inbox by Gmail App

Version 1.1 View in Chrome Web Store

Last scanned: about 3 hours ago

Extension Details

Rating: 3.8 ★ (176 ratings)

Context-Aware Verdict

MEDIUM
Overall Risk
Trust Factors:

The extension has a moderate rating of 3.8 stars from 176 users, indicating mixed user experiences. However, several concerning factors affect trustworthiness: missing critical metadata including user count, last update date, author information, and developer details. This lack of transparency raises questions about the extension's maintenance and legitimacy. The extension targets Gmail's discontinued Inbox service, which Google shut down in 2019, making its current utility questionable.

Concerns:

The permission set appears excessive for a simple app launcher. Audio and video capture permissions (audioCapture, videoCapture) are particularly concerning as they're unnecessary for launching Gmail applications and could enable unauthorized recording. The webview permission allows embedding external web content, creating potential security vulnerabilities. The extension uses the older Manifest V2, which has weaker security protections than the current V3 standard. The targeting of a discontinued Google service suggests the extension may be outdated or potentially repurposed for other activities.

Recommendations:

Consider running this extension in a separate Chrome profile to isolate potential risks. Verify the extension's current functionality since Inbox by Gmail no longer exists. Look for alternative, actively maintained Gmail extensions with more appropriate permission sets. Monitor the extension's behavior closely, particularly any unexpected audio/video access requests. Consider uninstalling if the extension doesn't provide clear value for current Gmail usage.

Findings

MEDIUM
Medium-Risk Permission: notifications
This extension has the notifications permission. Can show notifications.
MEDIUM
Medium-Risk Permission: notifications
This extension has the notifications permission. Can show notifications.
MEDIUM
Medium-Risk Permission: storage
This extension has the storage permission. Can store data locally.
MEDIUM
Medium-Risk Permission: webview
This extension has the webview permission. Can embed web content in the extension.
MEDIUM
Older Manifest Version
This extension uses Manifest Version 2, which has fewer security restrictions than Manifest V3. Consider using extensions that have upgraded to V3.