[ new scan ] [ statistics ] [ github ] [ twitter ] [ help ]

SaveChat for Gemini: Export to PDF & Markdown

Version 2.1.0 View in Chrome Web Store

Last scanned: about 7 hours ago

Extension Details

Developer: browserlab.io

Rating: 4.6 ★ (99 ratings)

Users: 20,000

Context-Aware Verdict

MEDIUM

Overall Risk

Trust Factors: The extension has a solid user base of 20,000 users with a strong 4.6-star rating from 99 reviews, indicating positive user experiences. The developer browserlab.io appears to be focused on browser utilities. The extension's purpose is clearly defined - exporting Gemini chat conversations to PDF and Markdown formats, which is a legitimate and useful functionality.

Concerns: The extension requires access to Google's Gemini and AI Studio domains, which handle sensitive AI conversations that may contain personal or confidential information. While the permissions are generally appropriate for the stated functionality, the storage permission could potentially be used to retain conversation data locally. The activeTab permission allows access to the current tab's content when the extension is activated, which is necessary but should be used responsibly given the sensitive nature of AI chat data.

Recommendations: This extension appears to serve its intended purpose with reasonable permissions for the functionality provided. However, given that it processes potentially sensitive AI conversation data, consider running it in a separate Chrome profile if you frequently discuss confidential topics with Gemini. Review the extension's privacy policy to understand how exported data is handled. Monitor for any unusual behavior or unexpected data retention. The medium risk level is primarily due to the sensitive nature of AI conversation data rather than overtly malicious permissions.

Findings

MEDIUM

Medium-Risk Permission: activeTab

This extension has the activeTab permission. Can access the active tab when clicking the extension icon.

MEDIUM

Medium-Risk Permission: contextMenus

This extension has the contextMenus permission. Can add items to the context menu.

MEDIUM

Medium-Risk Permission: storage

This extension has the storage permission. Can store data locally.

Security Analysis Details

Required Permissions:

activeTab
storage
contextMenus

Embedded URLs (27 total):

http://www.w3.org/2000/svg	http://www.w3.org/1999/xlink
https://gemini.google.com	https://gemini.google.com/app/
https://savechat.hamzaw.com	https://docs.google.com/forms/d/e/1FAIpQLSeF_exkgGZm0Qp8asZoKz6NzaKX3KLNJMpidM-Jo9nJemU3pA/viewform
https://gemini.google.com/	https://fonts.googleapis.com/css2?family=Google+Sans:wght@400
https://fonts.googleapis.com	https://fonts.gstatic.com
https://checkout.browserlab.io/checkout/buy/aa7d0a6f-960d-4aa6-8851-43b18e8378f7?variant=1264001	https://checkout.browserlab.io/checkout/buy/aa7d0a6f-960d-4aa6-8851-43b18e8378f7?variant=1264003
https://clients2.google.com/service/update2/crx	https://aistudio.google.com/
https://www.jsdelivr.com/using-sri-with-dynamic-files	https://github.com/niklasvh/html2canvas
https://github.com/cburgmer/rasterizeHTML.js	http://jspdf.default.namespaceuri/
http://www.w3.org/1999/02/22-rdf-syntax-ns#	http://www.w3.org/1999/xhtml
http://www.w3.org/1998/Math/MathML	http://pdfmake.org
https://tools.ietf.org/html/rfc4013#section-2.3	https://tools.ietf.org/html/rfc4013#section-2.5
https://tools.ietf.org/html/rfc3454#section-6	http://www.w3.org/XML/1998/namespace
http://www.w3.org/2000/xmlns/

Raw Manifest

{
  "name": "__MSG_appName__",
  "icons": {
    "16": "icons/icon16.png",
    "32": "icons/icon32.png",
    "48": "icons/icon48.png",
    "128": "icons/icon128.png"
  },
  "action": {
    "default_icon": {
      "16": "icons/icon16.png",
      "32": "icons/icon32.png",
      "48": "icons/icon48.png"
    },
    "default_popup": "popup.html"
  },
  "version": "2.1.0",
  "background": {
    "service_worker": "background.js"
  },
  "update_url": "https://clients2.google.com/service/update2/crx",
  "description": "__MSG_appDesc__",
  "permissions": [
    "activeTab",
    "storage",
    "contextMenus"
  ],
  "default_locale": "en",
  "content_scripts": [
    {
      "js": [
        "lib/katex.min.js",
        "math_processor.js",
        "lib/pdfmake.min.js",
        "lib/vfs_fonts.js",
        "lib/html-to-pdfmake.min.js",
        "config.js",
        "safe-storage.js",
        "gemini-storage.js",
        "api-client.js",
        "word_counter.js",
        "pinned_messages.js",
        "prompt_library.js",
        "image_gallery.js",
        "enhance_prompt.js",
        "content_gemini.js",
        "injector.js"
      ],
      "css": [
        "lib/katex.min.css"
      ],
      "run_at": "document_idle",
      "matches": [
        "https://gemini.google.com/*"
      ]
    },
    {
      "js": [
        "lib/katex.min.js",
        "math_processor.js",
        "lib/pdfmake.min.js",
        "lib/vfs_fonts.js",
        "lib/html-to-pdfmake.min.js",
        "lib/html2pdf.bundle.min.js",
        "content_aistudio.js"
      ],
      "css": [
        "lib/katex.min.css"
      ],
      "run_at": "document_idle",
      "matches": [
        "https://aistudio.google.com/*"
      ]
    }
  ],
  "manifest_version": 3,
  "web_accessible_resources": [
    {
      "matches": [
        "https://gemini.google.com/*",
        "https://aistudio.google.com/*"
      ],
      "resources": [
        "lib/fonts/*",
        "prompt_library.html",
        "prompt_library.css"
      ]
    }
  ]
}

by ✦ Astarte

SaveChat for Gemini: Export to PDF & Markdown

Extension Details

Context-Aware Verdict

Findings

Security Analysis Details

Required Permissions:

Embedded URLs (27 total):

Raw Manifest

Detections

Manifest Findings