Genji Overwatch Game Live Wallpaper Background
Version 4.1.2 View in Chrome Web Store
Last scanned: about 10 hours ago
Extension Details
Developer:
https://gameograf.com/
Rating:
5.0 ★
(3 ratings)
Users:
234
Context-Aware Verdict
This section provides a Claude-based AI analysis that applies additional context to the risk. Results are not guaranteed to be accurate.
MEDIUM
Overall Risk
Trust Factors: The extension has very limited adoption with only 234 users and just 3 ratings, making it difficult to assess reliability through community feedback. While it maintains a perfect 5.0 rating, this is based on an extremely small sample size. The developer website gameograf.com appears to be gaming-focused, which aligns with the extension's purpose. However, the low user base and minimal review history provide limited confidence in the extension's trustworthiness.
Concerns: The primary concern is the broad host permissions to api.gameograf.com, which while not as extensive as full web access, still allows the extension to communicate with external servers. The "search" permission seems unnecessary for a wallpaper extension, as live wallpapers typically don't require search functionality. This permission could potentially be used to monitor or modify search behavior. The combination of external API access and search permissions creates potential privacy risks beyond what would be expected for a simple wallpaper application.
Recommendations: Given the medium risk level and low adoption rate, consider running this extension in a separate Chrome profile to isolate any potential security issues. Monitor your search behavior and network activity after installation. Consider looking for alternative wallpaper extensions with larger user bases and more transparent permission usage. If you proceed with installation, regularly review the extension's behavior and remove it if you notice any unexpected search modifications or network activity.
Findings
This section provides a detailed analysis of the extension's security posture, without broader context. Assumes worst-case impact.
HIGH
Broad Host Permissions
This extension has broad host permissions allowing it to access many or all websites. This could potentially be used to steal sensitive data or track browsing activity.
Security Analysis Details
Required Permissions:
- search
Host Permissions:
- https://api.gameograf.com/*
Embedded URLs (51 total):
| https://fonts.googleapis.com | https://fonts.gstatic.com | |
| https://fonts.googleapis.com/css2?family=Poppins:ital | https://fonts.googleapis.com/css2?family=Material+Symbols+Outlined:opsz | |
| https://gameograf.com/news/ | https://clients2.google.com/service/update2/crx | |
| https://api.gameograf.com/ | https://chrome.google.com/webstore/detail/ | |
| https://gameograf.com/top-100/ | https://gameograf.com/privacy-policy | |
| https://api.gameograf.com/popup/message.json | https://gameograf.com/?utm_source=install&utm_medium=link&utm_campaign=bg&utm_content=install | |
| https://gameograf.com/?utm_source=gameograf&utm_medium=link&utm_campaign=bg&utm_content=uninstall | https://gameograf.com/wp-json/myplugin/v1/news | |
| https://api.gameograf.com/js/shortcuts.json | https://www.google.com/s2/favicons?domain= | |
| https://mail.google.com/ | https://ssl.gstatic.com/ui/v1/icons/mail/rfr/gmail.ico | |
| https://drive.google.com/ | https://ssl.gstatic.com/images/branding/product/1x/drive_2020q4_48dp.png | |
| https://docs.google.com/ | https://ssl.gstatic.com/docs/doclist/images/mediatype/icon_1_document_x32.png | |
| https://sheets.google.com/ | https://ssl.gstatic.com/docs/doclist/images/mediatype/icon_1_spreadsheet_x32.png | |
| https://slides.google.com/ | https://ssl.gstatic.com/docs/doclist/images/mediatype/icon_1_presentation_x32.png | |
| https://calendar.google.com/ | https://ssl.gstatic.com/calendar/images/dynamiclogo_2020q4/calendar_24_2x.png | |
| https://translate.google.com/ | https://translate.google.com/favicon.ico | |
| https://maps.google.com/ | https://maps.google.com/favicon.ico | |
| https://youtube.com/ | https://www.gstatic.com/marketing-cms/assets/images/58/3f/ac28ee8b450e9e21be9d1626708a/youtube.png | |
| https://news.google.com/ | https://www.gstatic.com/marketing-cms/assets/images/ec/ca/17131dff4c4fa87ba0491b991ae3/news.png | |
| https://keep.google.com/ | https://www.gstatic.com/images/branding/product/1x/keep_2020q4_48dp.png | |
| https://photos.google.com/ | https://ssl.gstatic.com/social/photosui/images/logo/1x/photos_64dp.png | |
| https://forms.google.com/ | https://ssl.gstatic.com/docs/doclist/images/mediatype/icon_1_form_x32.png | |
| https://www.google.com/ | https://www.google.com/favicon.ico | |
| https://contacts.google.com/ | https://ssl.gstatic.com/images/branding/product/1x/contacts_2022_48dp.png | |
| https://www.blogger.com/ | https://www.blogger.com/favicon.ico | |
| https://play.google.com/ | https://play.google.com/favicon.ico | |
| https://chat.openai.com/?q= |
Raw Manifest
{ "name": "__MSG_appName__", "icons": { "16": "img/128.png", "48": "img/128.png", "128": "img/128.png" }, "author": "Gameograf", "version": "4.1.2", "background": { "service_worker": "js/bg.js" }, "update_url": "https://clients2.google.com/service/update2/crx", "description": "__MSG_appDesc__", "permissions": [ "search" ], "default_locale": "en", "host_permissions": [ "https://api.gameograf.com/*" ], "manifest_version": 3, "chrome_url_overrides": { "newtab": "newtab.html" } }
ⓘ CRXaminer has partnered with our friends at Secure Annex to provide additional findings unique to their platform.
Secure Annex also analyzes extensions from other browsers, IDEs, and can continuously monitor.
Loading Secure Annex data...
Unable to load Secure Annex data.
This extension may not yet be analyzed by Secure Annex.
Detections
0Critical
0
High
0
Medium
0
Low
0
Has Verdicts
Yes
Manifest Findings
0Critical
0
High
0
Medium
0
Low
0
Secure Annex analyzed version: -