CRX aminer

Version 2.1.4 View in Chrome Web Store

Last scanned: about 10 hours ago

Extension Details

Context-Aware Verdict

MEDIUM
Overall Risk
Trust Factors: The extension lacks critical identifying information including name, description, author details, user count, and ratings, making it impossible to assess developer credibility or community trust. This absence of basic metadata is concerning for transparency and accountability.
Concerns:
- Missing essential extension metadata raises transparency issues
- Broad host permissions to Mozilla addon sites could enable data collection from Firefox addon browsing
- Unlimited storage permission allows indefinite local data accumulation
- Combination of scripting and declarativeNetRequestWithHostAccess permissions provides significant control over web requests
- Content script injection on Mozilla addon pages could modify user experience or collect browsing data
- Offscreen permission enables background processing that may not be visible to users
- The specific focus on Mozilla/Firefox addon sites suggests potential cross-browser data collection
Recommendations:

Consider running this extension in a separate Chrome profile to isolate potential risks. Before installation, research the extension's actual name and developer to verify legitimacy. Monitor your browsing behavior on Mozilla addon sites if you choose to install it. Given the broad permissions and missing metadata, consider whether the extension's functionality justifies these risks. Look for alternative extensions with clearer documentation and more limited permissions if similar functionality is available elsewhere.

Findings

HIGH
Broad Host Permissions
This extension has broad host permissions allowing it to access many or all websites. This could potentially be used to steal sensitive data or track browsing activity.
MEDIUM
Medium-Risk Permission: storage
This extension has the storage permission. Can store data locally.
MEDIUM
Medium-Risk Permission: unlimitedStorage
This extension has the unlimitedStorage permission. Can store unlimited data locally.