The extension has a strong user rating of 4.9 stars from 24 reviews, indicating satisfied users. However, the relatively small user base of 904 users provides limited validation of its safety. The lack of visible author and developer information reduces transparency and accountability, making it difficult to assess the creator's reputation or contact them if issues arise.
The primary concern is the broad content script injection capability across all websites (<all_urls>). While this permission aligns with vim-scroll's likely function of providing vim-style scrolling on any webpage, it grants extensive access that could be misused. The extension can read and modify content on every website you visit, potentially accessing sensitive information like passwords, personal data, or financial details. The missing description also makes it impossible to verify if the broad permissions are truly necessary for the stated functionality.
Given the medium risk level, consider running this extension in a separate Chrome profile dedicated to non-sensitive browsing activities. Before installation, research the extension further to find more detailed documentation about its functionality. Monitor your browsing behavior after installation for any unusual activity. Consider alternative vim-scrolling extensions with more transparent development practices or more limited permissions if available. If you proceed with installation, avoid using it on websites containing sensitive information like banking or personal accounts.
| https://clients2.google.com/service/update2/crx |
{ "name": "vim-scroll", "icons": { "128": "jk.png" }, "version": "5.0.1", "update_url": "https://clients2.google.com/service/update2/crx", "content_scripts": [ { "js": [ "vim-scroll.js" ], "matches": [ "<all_urls>" ] } ], "manifest_version": 3 }
ⓘ CRXaminer has partnered with our friends at Secure Annex to provide additional findings unique to their platform.
Secure Annex also analyzes extensions from other browsers, IDEs, and can continuously monitor.
This extension may not yet be analyzed by Secure Annex.