[ new scan ] [ statistics ] [ github ] [ twitter ] [ help ]

SmartScout - Amazon Product & Brand Research, Profitability & History Chart

Version 1.0.9 View in Chrome Web Store

Last scanned: about 2 hours ago

Extension Details

Developer: SmartestSeller LLC

Rating: 4.5 ★ (12 ratings)

Users: 7,000

Context-Aware Verdict

HIGH

Overall Risk

Trust Factors:

The extension comes from SmartestSeller LLC, which appears to be a legitimate company focused on Amazon seller tools. With 7,000 users and a 4.5-star rating from 12 reviews, it shows some positive user engagement, though the review count is relatively low. The extension's purpose - Amazon product and brand research - aligns with its requested permissions and host access patterns.

Concerns:

The extension requests powerful permissions including tabs, webRequest, and scripting capabilities that could be misused for malicious purposes. The webRequest permission is particularly concerning as it allows intercepting and modifying web traffic. The broad host permissions across multiple Amazon domains (11 different country sites) create a large attack surface. While these permissions appear necessary for the extension's stated functionality of Amazon research, they also enable significant data collection capabilities across all Amazon sites globally.

Recommendations:

Consider running this extension in a separate Chrome profile dedicated to Amazon business activities to limit exposure of personal browsing data. Before installation, verify the developer's legitimacy and read recent user reviews carefully. Monitor the extension's behavior and disable it when not actively conducting Amazon research. Given the legitimate business use case but powerful permissions, users should weigh the utility against the privacy implications. Only install if you specifically need Amazon product research capabilities and trust the developer with access to your Amazon browsing activity.

Findings

HIGH

Broad Host Permissions

This extension has broad host permissions allowing it to access many or all websites. This could potentially be used to steal sensitive data or track browsing activity.

HIGH

High-Risk Permission: tabs

This extension has the tabs permission. Can access browser tab information and manipulate tabs. This could potentially be used maliciously to compromise security or privacy.

HIGH

High-Risk Permission: webRequest

This extension has the webRequest permission. Can intercept and modify web requests. This could potentially be used maliciously to compromise security or privacy.

MEDIUM

Access to Sensitive Domains

This extension requests access to sensitive domains: https://www.amazon.com/*, https://www.amazon.ca/*, https://www.amazon.com.mx/*, https://www.amazon.co.uk/*, https://www.amazon.de/*, https://www.amazon.fr/*, https://www.amazon.it/*, https://www.amazon.es/*, https://www.amazon.co.jp/*, https://www.amazon.in/*, https://www.amazon.com.au/*. Ensure you trust this extension with access to these sites.

MEDIUM

Medium-Risk Permission: storage

This extension has the storage permission. Can store data locally.

Security Analysis Details

Required Permissions:

storage
scripting
tabs
webRequest

Host Permissions:

https://app.smartscout.com/*
https://smartscoutapi-east.azurewebsites.net/*
https://www.amazon.com/*
https://www.amazon.ca/*
https://www.amazon.com.mx/*
https://www.amazon.co.uk/*
https://www.amazon.de/*
https://www.amazon.fr/*
https://www.amazon.it/*
https://www.amazon.es/*
https://www.amazon.co.jp/*
https://www.amazon.in/*
https://www.amazon.com.au/*

Embedded URLs (33 total):

http://www.w3.org/2000/svg	https://smartscoutapi-east.azurewebsites.net/api/sessions
https://www.amazon.com/hz/reviews-render/ajax/medley-reviews/get/	https://www.amazon.ca/hz/reviews-render/ajax/medley-reviews/get/
https://www.amazon.com.mx/hz/reviews-render/ajax/medley-reviews/get/	https://www.amazon.co.uk/hz/reviews-render/ajax/medley-reviews/get/
https://www.amazon.de/hz/reviews-render/ajax/medley-reviews/get/	https://www.amazon.fr/hz/reviews-render/ajax/medley-reviews/get/
https://www.amazon.it/hz/reviews-render/ajax/medley-reviews/get/	https://www.amazon.es/hz/reviews-render/ajax/medley-reviews/get/
https://www.amazon.co.jp/hz/reviews-render/ajax/medley-reviews/get/	https://www.amazon.in/hz/reviews-render/ajax/medley-reviews/get/
https://www.amazon.com.au/hz/reviews-render/ajax/medley-reviews/get/	https://clients2.google.com/service/update2/crx
https://app.smartscout.com/	https://smartscoutapi-east.azurewebsites.net/
https://www.amazon.com/	https://www.amazon.ca/
https://www.amazon.com.mx/	https://www.amazon.co.uk/
https://www.amazon.de/	https://www.amazon.fr/
https://www.amazon.it/	https://www.amazon.es/
https://www.amazon.co.jp/	https://www.amazon.in/
https://www.amazon.com.au/	https://app.smartscout.com/app/
https://app.smartscout.com/sessions/	https://app.smartscout.com/extension/
https://app.smartscout.com	https://www.smartscout.com/pricing
https://www.smartscout.com/

Raw Manifest

{
  "name": "SmartScout - Amazon Product & Brand Research, Profitability & History Chart",
  "icons": {
    "16": "assets/icons/smartscout.png",
    "32": "assets/icons/smartscout.png",
    "48": "assets/icons/smartscout.png",
    "128": "assets/icons/smartscout.png"
  },
  "action": {
    "default_popup": "popup/popup.html",
    "default_title": "SmartScout"
  },
  "version": "1.0.9",
  "background": {
    "type": "module",
    "service_worker": "background.js"
  },
  "update_url": "https://clients2.google.com/service/update2/crx",
  "description": "Quickly find, evaluate, and save profitable products for Amazon FBA arbitrage & wholesale, all in one place. For free.",
  "permissions": [
    "storage",
    "scripting",
    "tabs",
    "webRequest"
  ],
  "content_scripts": [
    {
      "js": [
        "./scripts/update-token.js"
      ],
      "matches": [
        "https://app.smartscout.com/app/*",
        "https://app.smartscout.com/sessions/*"
      ],
      "all_frames": false
    },
    {
      "js": [
        "./scripts/product-page.js"
      ],
      "css": [
        "./styles/product-page.css"
      ],
      "run_at": "document_end",
      "matches": [
        "*://www.amazon.com/*",
        "*://www.amazon.ca/*",
        "*://www.amazon.com.mx/*",
        "*://www.amazon.co.uk/*",
        "*://www.amazon.de/*",
        "*://www.amazon.fr/*",
        "*://www.amazon.it/*",
        "*://www.amazon.es/*",
        "*://www.amazon.co.jp/*",
        "*://www.amazon.in/*",
        "*://www.amazon.com.au/*"
      ]
    },
    {
      "js": [
        "./scripts/subframe.js"
      ],
      "run_at": "document_start",
      "matches": [
        "https://app.smartscout.com/extension/*"
      ],
      "all_frames": true
    }
  ],
  "host_permissions": [
    "https://app.smartscout.com/*",
    "https://smartscoutapi-east.azurewebsites.net/*",
    "https://www.amazon.com/*",
    "https://www.amazon.ca/*",
    "https://www.amazon.com.mx/*",
    "https://www.amazon.co.uk/*",
    "https://www.amazon.de/*",
    "https://www.amazon.fr/*",
    "https://www.amazon.it/*",
    "https://www.amazon.es/*",
    "https://www.amazon.co.jp/*",
    "https://www.amazon.in/*",
    "https://www.amazon.com.au/*"
  ],
  "manifest_version": 3,
  "minimum_chrome_version": "88",
  "web_accessible_resources": [
    {
      "matches": [
        "https://www.amazon.com/*",
        "https://www.amazon.ca/*",
        "https://www.amazon.com.mx/*",
        "https://www.amazon.co.uk/*",
        "https://www.amazon.de/*",
        "https://www.amazon.fr/*",
        "https://www.amazon.it/*",
        "https://www.amazon.es/*",
        "https://www.amazon.co.jp/*",
        "https://www.amazon.in/*",
        "https://www.amazon.com.au/*"
      ],
      "resources": [
        "templates/*",
        "assets/*"
      ]
    }
  ]
}

by ✦ Astarte

SmartScout - Amazon Product & Brand Research, Profitability & History Chart

Extension Details

Context-Aware Verdict

Findings

Security Analysis Details

Required Permissions:

Host Permissions:

Embedded URLs (33 total):

Raw Manifest

Detections

Manifest Findings