[ new scan ] [ statistics ] [ github ] [ twitter ] [ help ]

Claude Token Counter

Version 1.0.2 View in Chrome Web Store

Last scanned: about 8 hours ago

Extension Details

Rating: 5.0 ★ (4 ratings)

Users: 1,000

Context-Aware Verdict

LOW

Overall Risk

Trust Factors:

The extension has a focused, legitimate purpose of counting tokens for Claude AI interactions. The 5.0 rating, while based on only 4 reviews, suggests positive user experience. The extension targets a specific, well-known AI platform (Claude.ai) which indicates a clear use case. The minimal security findings and lack of concerning permissions demonstrate good security practices.

Concerns:

- Very limited user base (1,000 users) makes it difficult to assess long-term reliability and community trust

- Only 4 ratings provide insufficient feedback for comprehensive evaluation

- Missing developer information reduces transparency and accountability

- No background scripts or host permissions suggest limited functionality, but also mean the extension's actual capabilities are unclear

- Content script injection on Claude.ai could potentially access sensitive conversation data, though this appears necessary for token counting functionality

Recommendations:

This extension appears relatively safe for its intended purpose. The content script access to Claude.ai is appropriate for token counting functionality. Given the low user base and limited reviews, consider monitoring the extension's behavior initially. The minimal permissions and security findings suggest the developer followed good security practices. Users comfortable with the developer having access to their Claude conversations for token counting purposes should find this extension acceptable to use in their main browser profile.

Findings

Raw Manifest

{
  "name": "Claude Token Counter",
  "icons": {
    "16": "icons/icon16.png",
    "32": "icons/icon32.png",
    "48": "icons/icon48.png",
    "96": "icons/icon96.png",
    "128": "icons/icon128.png",
    "256": "icons/icon256.png"
  },
  "action": {
    "default_icon": {
      "16": "icons/icon16.png",
      "32": "icons/icon32.png",
      "48": "icons/icon48.png",
      "96": "icons/icon96.png",
      "128": "icons/icon128.png"
    },
    "default_title": "Claude Token Counter"
  },
  "version": "1.0.2",
  "update_url": "https://clients2.google.com/service/update2/crx",
  "description": "Shows ~token count, cache timer, and native session/weekly usage bars on claude.ai.",
  "content_scripts": [
    {
      "js": [
        "src/content/constants.js",
        "src/content/bridge-client.js",
        "src/vendor/o200k_base.js",
        "src/content/tokens.js",
        "src/content/ui.js",
        "src/content/main.js"
      ],
      "css": [
        "src/styles.css"
      ],
      "matches": [
        "https://claude.ai/*"
      ]
    }
  ],
  "manifest_version": 3,
  "web_accessible_resources": [
    {
      "matches": [
        "https://claude.ai/*"
      ],
      "resources": [
        "src/injected/bridge.js"
      ]
    }
  ]
}

by ✦ Astarte

https://claude.ai/api/organizations/	https://github.com/kr1shnasomani/claude-counter
https://chromewebstore.google.com/detail/bioobpobpbeohjoefndgkiaakboimpch	https://github.com/she-llac/claude-counter
https://github.com/niieani/gpt-tokenizer	https://github.com/lugia19/Claude-Usage-Extension
https://clients2.google.com/service/update2/crx	https://claude.ai/
https://claude.ai

Claude Token Counter

Extension Details

Context-Aware Verdict

Findings

Security Analysis Details

Embedded URLs (9 total):

Raw Manifest

Detections

Manifest Findings