CRX aminer
Extension icon

One Click Image Downloader

Version 1.3.0 View in Chrome Web Store

Last scanned: 6 days ago | force re-scan

Extension Details

Rating: 3.6 ★ (120 ratings)
Size: 229KiB
Last Updated: October 11, 2021
Users: 30,000

Context-Aware Verdict

MEDIUM
Risk Level
Trust Factors:
- The extension has a decent number of users (30,000), which suggests some level of trust.
- However, the lack of developer information and a low rating (3.6/5) raise some concerns.
Concerns:
- The "downloads" permission is considered high-risk as it allows the extension to download files and access download history, which could potentially compromise security or privacy.
- The "storage" permission allows the extension to store data locally, which could be a privacy concern if sensitive data is stored.
- The extension uses the older Manifest Version 2, which has fewer security restrictions than the newer Manifest V3.
Recommendations:
- Exercise caution when using this extension, as it has high-risk permissions and an older manifest version.
- Consider using a separate Chrome profile or a sandboxed environment when running this extension to isolate any potential risks.
- Monitor the extension's behavior and check for any suspicious activities, such as unauthorized downloads or data collection.
- Look for alternative extensions with similar functionality but with better security practices and a more reputable developer.
- If you decide to use this extension, ensure that you have updated your browser and operating system with the latest security patches.

Security Analysis

MEDIUM
Overall Risk
Based on 3 total findings, ranked without considering overall context, including 1 high-risk and 2 medium-risk findings.
HIGH
High-Risk Permission: downloads
This extension has the downloads permission. Can download files and access download history. This could potentially be used maliciously to compromise security or privacy.
MEDIUM
Medium-Risk Permission: storage
This extension has the storage permission. Can store data locally.
MEDIUM
Older Manifest Version
This extension uses Manifest Version 2, which has fewer security restrictions than Manifest V3. Consider using extensions that have upgraded to V3.