Agent Risk Reminder Remover - CNFans, ACBuy & More
Version 1.0.1 View in Chrome Web Store
Last scanned: about 4 hours ago
Extension Details
Rating:
5.0 ★
(8 ratings)
Users:
549
Context-Aware Verdict
This section provides a Claude-based AI analysis that applies additional context to the risk. Results are not guaranteed to be accurate.
HIGH
Overall Risk
Trust Factors:
The extension has a perfect 5.0 rating but only 8 reviews, which is insufficient to establish credibility. With only 549 users, it has very limited adoption. The lack of developer information and company details raises transparency concerns. The extension targets Chinese shopping agent websites, which may involve financial transactions and personal data.
Concerns:
The extension requests access to an unusually broad range of domains (40+ shopping agent sites plus Reddit, Google Docs/Sheets, and Yupoo), which far exceeds what would be necessary for simply removing risk reminders. The tabs permission allows monitoring and manipulation of all browser tabs, not just the targeted shopping sites. The notifications and storage permissions, while individually reasonable, combined with the extensive host permissions create a concerning attack surface. The extension could potentially intercept sensitive shopping data, payment information, or personal communications across multiple platforms.
Recommendations:
Given the high risk level, install this extension only in a separate Chrome profile dedicated to shopping agent activities. Regularly review the extension's behavior and remove it when not actively needed. Consider whether the convenience of removing risk reminders justifies the extensive permissions granted. Monitor your accounts on the affected shopping platforms for any unusual activity. If possible, use alternative methods to manage risk warnings rather than relying on this extension.
Findings
This section provides a detailed analysis of the extension's security posture, without broader context. Assumes worst-case impact.
HIGH
Broad Host Permissions
This extension has broad host permissions allowing it to access many or all websites. This could potentially be used to steal sensitive data or track browsing activity.
HIGH
High-Risk Permission: tabs
This extension has the tabs permission. Can access browser tab information and manipulate tabs. This could potentially be used maliciously to compromise security or privacy.
MEDIUM
Access to Sensitive Domains
This extension requests access to sensitive domains: https://docs.google.com/*, https://sheets.google.com/*. Ensure you trust this extension with access to these sites.
MEDIUM
Medium-Risk Permission: notifications
This extension has the notifications permission. Can show notifications.
MEDIUM
Medium-Risk Permission: storage
This extension has the storage permission. Can store data locally.
Security Analysis Details
Required Permissions:
- notifications
- storage
- tabs
Host Permissions:
- https://joyagoo.com/*
- https://*.joyagoo.com/*
- https://cnfans.com/*
- https://*.cnfans.com/*
- https://mulebuy.com/*
- https://*.mulebuy.com/*
- https://orientdig.com/*
- https://*.orientdig.com/*
- https://joyabuy.com/*
- https://*.joyabuy.com/*
- https://acbuy.com/*
- https://*.acbuy.com/*
- https://lovegobuy.com/*
- https://*.lovegobuy.com/*
- https://ponybuy.com/*
- https://*.ponybuy.com/*
- https://allchinabuy.com/*
- https://*.allchinabuy.com/*
- https://hegobuy.com/*
- https://*.hegobuy.com/*
- https://hagobuy.com/*
- https://*.hagobuy.com/*
- https://kakobuy.com/*
- https://*.kakobuy.com/*
- https://superbuy.com/*
- https://*.superbuy.com/*
- https://wegobuy.com/*
- https://*.wegobuy.com/*
- https://pandabuy.com/*
- https://*.pandabuy.com/*
- https://loongbuy.com/*
- https://*.loongbuy.com/*
- https://hoobuy.com/*
- https://*.hoobuy.com/*
- https://oopbuy.com/*
- https://*.oopbuy.com/*
- https://sugargoo.com/*
- https://*.sugargoo.com/*
- https://cssbuy.com/*
- https://*.cssbuy.com/*
- https://usfans.com/*
- https://*.usfans.com/*
- https://pingubuy.com/*
- https://*.pingubuy.com/*
- https://pantherbuy.com/*
- https://*.pantherbuy.com/*
- https://ootdbuy.com/*
- https://*.ootdbuy.com/*
- https://hipobuy.com/*
- https://*.hipobuy.com/*
- https://bbdbuy.com/*
- https://*.bbdbuy.com/*
- https://gonest.cn/*
- https://*.gonest.cn/*
- https://basetao.com/*
- https://*.basetao.com/*
- https://kameymall.com/*
- https://*.kameymall.com/*
- https://ezbuycn.com/*
- https://*.ezbuycn.com/*
- https://eastmallbuy.com/*
- https://*.eastmallbuy.com/*
- https://hubbuycn.com/*
- https://*.hubbuycn.com/*
- https://blikbuy.com/*
- https://*.blikbuy.com/*
- https://sifubuy.com/*
- https://*.sifubuy.com/*
- https://itaobuy.com/*
- https://*.itaobuy.com/*
- https://panglobalbuy.com/*
- https://*.panglobalbuy.com/*
- https://www.reddit.com/*
- https://reddit.com/*
- https://weidian.com/*
- https://docs.google.com/*
- https://sheets.google.com/*
- https://*.yupoo.com/*
- https://*.x.yupoo.com/*
Embedded URLs (122 total):
| https://joyagoo.com | https://cnfans.com | |
| https://fonts.googleapis.com | https://fonts.gstatic.com | |
| https://fonts.googleapis.com/css2?family=Inter:wght@400 | https://docs.google.com/spreadsheets/d/1LGH6EGInPS2cmP1bsNcrYOICXHP9LETGwRbDKEFUzV4/edit?copiedFromTrash=&gid=1341747896#gid=1341747896 | |
| https://joyagoo.com/register/?ref=300797739 | https://beacons.ai/harmafindsextension | |
| https://clients2.google.com/service/update2/crx | https://joyagoo.com/ | |
| https://cnfans.com/ | https://mulebuy.com/ | |
| https://orientdig.com/ | https://joyabuy.com/ | |
| https://acbuy.com/ | https://lovegobuy.com/ | |
| https://ponybuy.com/ | https://allchinabuy.com/ | |
| https://hegobuy.com/ | https://hagobuy.com/ | |
| https://kakobuy.com/ | https://superbuy.com/ | |
| https://wegobuy.com/ | https://pandabuy.com/ | |
| https://loongbuy.com/ | https://hoobuy.com/ | |
| https://oopbuy.com/ | https://sugargoo.com/ | |
| https://cssbuy.com/ | https://usfans.com/ | |
| https://pingubuy.com/ | https://pantherbuy.com/ | |
| https://ootdbuy.com/ | https://hipobuy.com/ | |
| https://bbdbuy.com/ | https://gonest.cn/ | |
| https://basetao.com/ | https://kameymall.com/ | |
| https://ezbuycn.com/ | https://eastmallbuy.com/ | |
| https://hubbuycn.com/ | https://blikbuy.com/ | |
| https://sifubuy.com/ | https://itaobuy.com/ | |
| https://panglobalbuy.com/ | https://www.reddit.com/ | |
| https://reddit.com/ | https://weidian.com/ | |
| https://docs.google.com/ | https://sheets.google.com/ | |
| https://docs.google.com/... | https://example.com/coupons | |
| https://ogsheets.com | https://joyagoo.com/product | |
| https://cnfans.com/product | https://mulebuy.com/product | |
| https://item.taobao.com/item.htm?id= | https://detail.tmall.com/item.htm?id= | |
| https://weidian.com/item.html?itemID= | https://detail.1688.com/offer/ | |
| https://www.kakobuy.com/item/details?url= | https://hipobuy.com/product/ | |
| https://cnfans.com/product?id= | https://www.acbuy.com/product?id= | |
| https://mulebuy.com/product?id= | https://oopbuy.com/product/ | |
| https://lovegobuy.com/product?id= | https://www.itaobuy.com/product-detail?url= | |
| https://cssbuy.com/item-1688- | https://cssbuy.com/item-micro- | |
| https://cssbuy.com/item- | https://usfans.com/product/ | |
| https://www.superbuy.com/en/page/buy/?platform= | https://www.basetao.com/best-taobao-agent-service/products/agent/ | |
| https://eastmallbuy.com/item?tp=1688&tid= | https://eastmallbuy.com/item?tp=micro&tid= | |
| https://eastmallbuy.com/index/item/index.html?tp=taobao&url= | https://pingubuy.com/item-1688- | |
| https://pingubuy.com/item-micro- | https://pingubuy.com/item- |
Page 1 of 2
Raw Manifest
{ "name": "Agent Risk Reminder Remover - CNFans, ACBuy & More", "icons": { "16": "128.jpg", "32": "128.jpg", "48": "128.jpg", "128": "128.jpg" }, "action": { "default_popup": "popup.html" }, "version": "1.0.1", "background": { "service_worker": "background.js" }, "update_url": "https://clients2.google.com/service/update2/crx", "description": "Agent Risk Reminder Remover - CNFans, ACBuy & more agents", "permissions": [ "notifications", "storage", "tabs" ], "options_page": "options.html", "content_scripts": [ { "js": [ "content.js" ], "run_at": "document_end", "matches": [ "https://www.reddit.com/*", "https://reddit.com/*", "https://docs.google.com/*", "https://sheets.google.com/*", "https://*.yupoo.com/*", "https://*.x.yupoo.com/*" ] }, { "js": [ "agentContent.js" ], "run_at": "document_end", "matches": [ "https://joyagoo.com/*", "https://*.joyagoo.com/*", "https://cnfans.com/*", "https://*.cnfans.com/*", "https://mulebuy.com/*", "https://*.mulebuy.com/*", "https://orientdig.com/*", "https://*.orientdig.com/*", "https://joyabuy.com/*", "https://*.joyabuy.com/*", "https://acbuy.com/*", "https://*.acbuy.com/*", "https://lovegobuy.com/*", "https://*.lovegobuy.com/*", "https://ponybuy.com/*", "https://*.ponybuy.com/*", "https://allchinabuy.com/*", "https://*.allchinabuy.com/*", "https://hegobuy.com/*", "https://*.hegobuy.com/*", "https://hagobuy.com/*", "https://*.hagobuy.com/*", "https://kakobuy.com/*", "https://*.kakobuy.com/*", "https://superbuy.com/*", "https://*.superbuy.com/*", "https://wegobuy.com/*", "https://*.wegobuy.com/*", "https://pandabuy.com/*", "https://*.pandabuy.com/*", "https://loongbuy.com/*", "https://*.loongbuy.com/*", "https://hoobuy.com/*", "https://*.hoobuy.com/*", "https://oopbuy.com/*", "https://*.oopbuy.com/*", "https://sugargoo.com/*", "https://*.sugargoo.com/*", "https://cssbuy.com/*", "https://*.cssbuy.com/*", "https://usfans.com/*", "https://*.usfans.com/*", "https://pingubuy.com/*", "https://*.pingubuy.com/*", "https://pantherbuy.com/*", "https://*.pantherbuy.com/*", "https://ootdbuy.com/*", "https://*.ootdbuy.com/*", "https://hipobuy.com/*", "https://*.hipobuy.com/*", "https://bbdbuy.com/*", "https://*.bbdbuy.com/*", "https://gonest.cn/*", "https://*.gonest.cn/*", "https://basetao.com/*", "https://*.basetao.com/*", "https://kameymall.com/*", "https://*.kameymall.com/*", "https://ezbuycn.com/*", "https://*.ezbuycn.com/*", "https://eastmallbuy.com/*", "https://*.eastmallbuy.com/*", "https://hubbuycn.com/*", "https://*.hubbuycn.com/*", "https://blikbuy.com/*", "https://*.blikbuy.com/*", "https://sifubuy.com/*", "https://*.sifubuy.com/*", "https://itaobuy.com/*", "https://*.itaobuy.com/*", "https://panglobalbuy.com/*", "https://*.panglobalbuy.com/*" ] } ], "host_permissions": [ "https://joyagoo.com/*", "https://*.joyagoo.com/*", "https://cnfans.com/*", "https://*.cnfans.com/*", "https://mulebuy.com/*", "https://*.mulebuy.com/*", "https://orientdig.com/*", "https://*.orientdig.com/*", "https://joyabuy.com/*", "https://*.joyabuy.com/*", "https://acbuy.com/*", "https://*.acbuy.com/*", "https://lovegobuy.com/*", "https://*.lovegobuy.com/*", "https://ponybuy.com/*", "https://*.ponybuy.com/*", "https://allchinabuy.com/*", "https://*.allchinabuy.com/*", "https://hegobuy.com/*", "https://*.hegobuy.com/*", "https://hagobuy.com/*", "https://*.hagobuy.com/*", "https://kakobuy.com/*", "https://*.kakobuy.com/*", "https://superbuy.com/*", "https://*.superbuy.com/*", "https://wegobuy.com/*", "https://*.wegobuy.com/*", "https://pandabuy.com/*", "https://*.pandabuy.com/*", "https://loongbuy.com/*", "https://*.loongbuy.com/*", "https://hoobuy.com/*", "https://*.hoobuy.com/*", "https://oopbuy.com/*", "https://*.oopbuy.com/*", "https://sugargoo.com/*", "https://*.sugargoo.com/*", "https://cssbuy.com/*", "https://*.cssbuy.com/*", "https://usfans.com/*", "https://*.usfans.com/*", "https://pingubuy.com/*", "https://*.pingubuy.com/*", "https://pantherbuy.com/*", "https://*.pantherbuy.com/*", "https://ootdbuy.com/*", "https://*.ootdbuy.com/*", "https://hipobuy.com/*", "https://*.hipobuy.com/*", "https://bbdbuy.com/*", "https://*.bbdbuy.com/*", "https://gonest.cn/*", "https://*.gonest.cn/*", "https://basetao.com/*", "https://*.basetao.com/*", "https://kameymall.com/*", "https://*.kameymall.com/*", "https://ezbuycn.com/*", "https://*.ezbuycn.com/*", "https://eastmallbuy.com/*", "https://*.eastmallbuy.com/*", "https://hubbuycn.com/*", "https://*.hubbuycn.com/*", "https://blikbuy.com/*", "https://*.blikbuy.com/*", "https://sifubuy.com/*", "https://*.sifubuy.com/*", "https://itaobuy.com/*", "https://*.itaobuy.com/*", "https://panglobalbuy.com/*", "https://*.panglobalbuy.com/*", "https://www.reddit.com/*", "https://reddit.com/*", "https://weidian.com/*", "https://docs.google.com/*", "https://sheets.google.com/*", "https://*.yupoo.com/*", "https://*.x.yupoo.com/*" ], "manifest_version": 3, "web_accessible_resources": [ { "matches": [ "<all_urls>" ], "resources": [ "content/*.js", "content/**/*.js" ] } ] }
ⓘ CRXaminer has partnered with our friends at Secure Annex to provide additional findings unique to their platform.
Secure Annex also analyzes extensions from other browsers, IDEs, and can continuously monitor.
Loading Secure Annex data...
Unable to load Secure Annex data.
This extension may not yet be analyzed by Secure Annex.
Detections
0Critical
0
High
0
Medium
0
Low
0
Has Verdicts
Yes
Manifest Findings
0Critical
0
High
0
Medium
0
Low
0
Secure Annex analyzed version: -