CRX aminer
Extension icon

Teamleader Integrations

Version 4.0.15 View in Chrome Web Store

Last scanned: about 14 hours ago

Extension Details

Rating: 3.4 ★ (34 ratings)
Users: 10,000

Context-Aware Verdict

HIGH
Overall Risk
Trust Factors:

The extension has a moderate user base of 10,000 users, which provides some validation through adoption. However, the relatively low rating of 3.4 out of 5 stars from 34 reviews suggests user dissatisfaction or potential issues. The lack of clear developer information raises transparency concerns, making it difficult to assess the company's reputation or accountability.

Concerns:

The extension requests highly sensitive permissions that seem excessive for a typical business integration tool. The management permission allows control over other extensions, which is rarely necessary for CRM integrations. The identity permission provides access to personal identity information, creating significant privacy risks. The broad host permissions, while targeting specific business platforms (LinkedIn, Gmail, Teamleader), still represent a wide attack surface. The combination of these powerful permissions creates potential for data harvesting, account compromise, or malicious extension management.

Recommendations:

Given the high-risk permission combination, consider running this extension in a separate Chrome profile dedicated to business activities only. Verify the extension's legitimacy through Teamleader's official website or support channels before installation. Regularly review the extension's activity and consider alternatives with more limited permissions. Monitor your accounts on the permitted domains for any unusual activity. If the extension's functionality doesn't clearly require all these permissions, consider uninstalling it until the developer provides better justification for the permission scope.

Findings

HIGH
Broad Host Permissions
This extension has broad host permissions allowing it to access many or all websites. This could potentially be used to steal sensitive data or track browsing activity.
HIGH
High-Risk Permission: identity
This extension has the identity permission. Can access your identity information. This could potentially be used maliciously to compromise security or privacy.
HIGH
High-Risk Permission: management
This extension has the management permission. Can manage other extensions. This could potentially be used maliciously to compromise security or privacy.
MEDIUM
Access to Sensitive Domains
This extension requests access to sensitive domains: https://www.linkedin.com/*, https://mail.google.com/*. Ensure you trust this extension with access to these sites.
MEDIUM
Medium-Risk Permission: storage
This extension has the storage permission. Can store data locally.