[ new scan ] [ statistics ] [ github ] [ twitter ] [ help ]

Startwerk – A Better Start Page

Version 1.10.1 View in Chrome Web Store

Last scanned: about 11 hours ago

Extension Details

Rating: 4.3 ★ (3 ratings)

Users: 53

Context-Aware Verdict

MEDIUM

Overall Risk

Based on 2 total findings, including 1 high-risk finding.

Findings

HIGH

High-Risk Permission: tabs

This extension has the tabs permission. Can access browser tab information and manipulate tabs. This could potentially be used maliciously to compromise security or privacy.

MEDIUM

Medium-Risk Permission: storage

This extension has the storage permission. Can store data locally.

Security Analysis Details

Required Permissions:

storage
search
favicon
alarms
sessions
tabs

Optional Permissions:

bookmarks
topSites
notifications

Embedded URLs (79 total):

https://startwerk.site	https://startwerk.site/api/weather.php
https://www.geonames.org/	https://app.todoist.com/app/settings/integrations/developer
https://readwise.io/access_token	https://www.met.no/en
https://creativecommons.org/licenses/by/4.0/	https://www.dwd.de/
https://brightsky.dev/	http://www.w3.org/2000/svg
https://mail.google.com/	https://www.youtube.com/
https://www.twitch.tv/	https://www.instagram.com/
https://www.reddit.com/	https://joinmastodon.org/de
https://joinmastodon.org/	https://www.ifun.de/
https://www.appgefahren.de/	https://stadt-bremerhaven.de
https://www.housecontrollers.de	https://www.ecosia.org/
https://www.google.com	https://www.google.de
https://www.google.es	https://www.google.fr
https://www.google.it	https://www.google.co.in
https://www.google.com.br	https://www.google.com.tr
https://www.google.nl	https://www.google.co.jp
https://www.google.com.ua	https://www.google.pl
https://www.google.se	https://www.google.no
https://www.google.co.id	https://www.google.dk
https://www.google.cz	https://www.linkedin.com/
https://www.shoop.de/invite/7gCxr3ojeG/	https://chromewebstore.google.com/detail/startwerk-%E2%80%93-a-better-star/bfkogeheilihfleenicihmpllolohhaj
https://api.brightsky.dev/	https://www.google.com/search?q=
https://www.bing.com/search?q=	https://www.ecosia.org/search?q=
https://duckduckgo.com/?q=	https://search.brave.com/search?q=
https://www.qwant.com/?q=	https://www.perplexity.ai/search?q=
https://chatgpt.com/?q=	https://search.seznam.cz/?q=
https://search.yahoo.co.jp/search?p=	https://www.google.com/s2/favicons?domain_url=
https://readwise.io/	https://readwise.io/api/v2/
https://readwise.io/open/	https://readwise.io/dailyreview
https://www.finalcallapp.com?utm_source=startwerk&utm_medium=web&utm_campaign=startwerk	https://api.todoist.com/
https://api.todoist.com/api/v1/	https://todoist.com/showTask?id=
https://app.slack.com/huddle/	https://beispiel.de
https://example.com	https://ejemplo.com
https://exemple.com	https://esempio.com
https://exemplo.com	https://ornek.com
https://voorbeeld.nl	https://przyklad.pl
https://exempel.se	https://eksempel.no
https://contoh.id	https://eksempel.dk
https://startwerk.site/imprint.html	https://startwerk.site/privacy.html
https://clients2.google.com/service/update2/crx

Raw Manifest

{
  "name": "__MSG_extName__",
  "icons": {
    "16": "icons/icon16.png",
    "32": "icons/icon32.png",
    "48": "icons/icon48.png",
    "128": "icons/icon128.png"
  },
  "action": {
    "default_icon": {
      "16": "icons/icon16.png",
      "32": "icons/icon32.png",
      "48": "icons/icon48.png",
      "128": "icons/icon128.png"
    },
    "default_title": "__MSG_extShortName__"
  },
  "version": "1.10.1",
  "background": {
    "type": "module",
    "service_worker": "sw.js"
  },
  "short_name": "__MSG_extShortName__",
  "update_url": "https://clients2.google.com/service/update2/crx",
  "description": "__MSG_extDescription__",
  "permissions": [
    "storage",
    "search",
    "favicon",
    "alarms",
    "sessions",
    "tabs"
  ],
  "default_locale": "de",
  "manifest_version": 3,
  "chrome_url_overrides": {
    "newtab": "newtab.html"
  },
  "optional_permissions": [
    "bookmarks",
    "topSites",
    "notifications"
  ],
  "minimum_chrome_version": "120",
  "web_accessible_resources": [
    {
      "matches": [
        "<all_urls>"
      ],
      "resources": [
        "_favicon/*"
      ],
      "extension_ids": []
    }
  ],
  "optional_host_permissions": [
    "*://*/*"
  ]
}

by ✦ Astarte