Extension Details
Context-Aware Verdict
The extension has a solid user base of 20,000 users with a good rating of 4.4 stars from 134 reviews, indicating positive user experiences. The developer domain "postureminder.app" suggests a dedicated service for posture-related functionality, which aligns with the extension's apparent purpose. The use of Manifest V3 demonstrates adherence to modern Chrome extension standards and security practices.
The permissions requested are generally appropriate for a posture reminder application. The alarms permission allows for scheduled reminders, notifications enable user alerts, storage permits saving user preferences, and offscreen supports background processing. However, the storage permission could potentially be used to collect and store user data beyond basic settings. The lack of detailed description makes it difficult to fully assess the extension's intended functionality and data handling practices.
This extension appears to be relatively low-risk for its intended purpose. The permissions align with typical posture reminder functionality. Users should review what data the extension collects through its privacy policy if available. Consider monitoring the types of notifications and data storage to ensure they match expected posture reminder features. The extension can likely be used in your main Chrome profile, but users concerned about data privacy might consider running it in a separate profile until they're comfortable with its behavior.
Findings
Security Analysis Details
Required Permissions:
- alarms
- notifications
- offscreen
- storage
Embedded URLs (10 total):
| https://postureminder.app/faq#ffclose | https://www.paypal.com/donate | |
| https://www.paypalobjects.com/en_US/i/btn/btn_donate_SM.gif | https://www.paypal.com/en_US/i/scr/pixel.gif | |
| https://postureminder.app/faq | https://chrome.google.com/webstore/detail/postureminder/dkmkfopiihabelocpelofchappjjnpkm?hl=en-US&gl=US | |
| https://clients2.google.com/service/update2/crx | https://postureminder.app/get-started?c=1 | |
| https://postureminder.app/faq?c=1 | https://postureminder.app/uninstall |
Raw Manifest
{ "name": "PostureMinder", "icons": { "128": "img/spine.png" }, "action": { "default_icon": "img/spine.png", "default_popup": "popout.html", "default_title": "PostureMinder" }, "author": "Sheryl Lun", "version": "2.1.3", "background": { "type": "module", "service_worker": "service_worker.js" }, "update_url": "https://clients2.google.com/service/update2/crx", "description": "Reminds you to sit up straight with pop-up notifications at specified time intervals.", "permissions": [ "alarms", "notifications", "offscreen", "storage" ], "manifest_version": 3, "web_accessible_resources": [ { "matches": [ "<all_urls>" ], "resources": [ "./audio/notification.mp3" ] } ] }
ⓘ CRXaminer has partnered with our friends at Secure Annex to provide additional findings unique to their platform.
Secure Annex also analyzes extensions from other browsers, IDEs, and can continuously monitor.
This extension may not yet be analyzed by Secure Annex.