CRX aminer
Extension icon

App Launcher for Inbox by Gmail App

Version 1.1 View in Chrome Web Store

Last scanned: about 2 hours ago

Extension Details

Rating: 3.8 ★ (176 ratings)

Context-Aware Verdict

MEDIUM
Overall Risk
Trust Factors:

The extension has a moderate rating of 3.8 stars from 176 users, indicating mixed user experiences. However, several concerning factors reduce trustworthiness: the extension lacks basic information like developer details, user count, last update date, and file size. The absence of this transparency is problematic for a utility that should be straightforward. Additionally, Inbox by Gmail was discontinued by Google in 2019, making this extension's purpose questionable.

Concerns:

The permission set is excessive for a simple app launcher. Audio and video capture permissions (audioCapture, videoCapture) are completely unnecessary for launching Gmail and suggest potential surveillance capabilities. The webview permission, while possibly legitimate for embedding Gmail content, creates security risks by allowing arbitrary web content execution. The duplicate notifications permission listing indicates poor code quality or manifest errors. Using the outdated Manifest V2 provides fewer security protections than modern extensions.

Recommendations:

Consider using Google's official Gmail interface instead, as Inbox by Gmail no longer exists. If you must use this extension, run it in a separate Chrome profile to isolate potential risks from your main browsing session. The audio/video capture permissions are major red flags that warrant extreme caution. Look for alternative Gmail productivity extensions from verified developers with transparent information and Manifest V3 compliance.

Findings

MEDIUM
Medium-Risk Permission: notifications
This extension has the notifications permission. Can show notifications.
MEDIUM
Medium-Risk Permission: notifications
This extension has the notifications permission. Can show notifications.
MEDIUM
Medium-Risk Permission: storage
This extension has the storage permission. Can store data locally.
MEDIUM
Medium-Risk Permission: webview
This extension has the webview permission. Can embed web content in the extension.
MEDIUM
Older Manifest Version
This extension uses Manifest Version 2, which has fewer security restrictions than Manifest V3. Consider using extensions that have upgraded to V3.