Starting analysis...
Extension Details
Developer:
postureminder.app
Rating:
4.4 ★
(133 ratings)
Size:
36.06KiB
Last Updated:
August 29, 2024
Users:
20,000
Context-Aware Verdict
This section provides a Claude-based AI analysis that applies additional context to the risk. Results are not guaranteed to be accurate.
LOW
Risk Level
Trust Factors:
- The extension has a relatively high number of users (20,000) and a good rating (4.4/5), indicating that it is likely a legitimate and useful extension.
- The developer information is provided, which adds transparency and accountability.
Concerns:
- The "notifications" permission allows the extension to display notifications, which could potentially be used for advertising or other unwanted purposes.
- The "storage" permission allows the extension to store data locally, which could raise privacy concerns if sensitive information is stored.
Recommendations:
- While the permissions raise some potential concerns, they appear to be necessary for the extension's stated purpose of reminding users about their posture.
- To mitigate risks, users can periodically review the extension's permissions and revoke any that seem unnecessary or concerning.
- Users can also enable Chrome's built-in extension auditing feature to monitor the extension's behavior and detect any suspicious activities.
- If users have significant privacy concerns, they can consider running the extension in a separate Chrome profile or incognito mode.
Overall, based on the provided information, the PostureMinder extension appears to be a relatively low-risk extension, but users should still exercise caution and monitor its behavior.
Security Analysis
This section provides a detailed analysis of the extension's security posture, without broader context. Assumes worst-case impact.
MEDIUM
Overall Risk
Based on 2 total findings, ranked without considering overall context, including 0 high-risk and 2 medium-risk findings.
MEDIUM
Medium-Risk Permission: notifications
This extension has the notifications permission. Can show notifications.
MEDIUM
Medium-Risk Permission: storage
This extension has the storage permission. Can store data locally.
Security Analysis Details
Required Permissions:
- alarms
- notifications
- offscreen
- storage
Embedded URLs (10 total):
| https://postureminder.app/faq#ffclose | https://www.paypal.com/donate | |
| https://www.paypalobjects.com/en_US/i/btn/btn_donate_SM.gif | https://www.paypal.com/en_US/i/scr/pixel.gif | |
| https://postureminder.app/faq | https://chrome.google.com/webstore/detail/postureminder/dkmkfopiihabelocpelofchappjjnpkm?hl=en-US&gl=US | |
| https://clients2.google.com/service/update2/crx | https://postureminder.app/get-started?c=1 | |
| https://postureminder.app/faq?c=1 | https://postureminder.app/uninstall |
Raw Manifest
{ "name": "PostureMinder", "icons": { "128": "img/spine.png" }, "action": { "default_icon": "img/spine.png", "default_popup": "popout.html", "default_title": "PostureMinder" }, "author": "Sheryl Lun", "version": "2.1.3", "background": { "type": "module", "service_worker": "service_worker.js" }, "update_url": "https://clients2.google.com/service/update2/crx", "description": "Reminds you to sit up straight with pop-up notifications at specified time intervals.", "permissions": [ "alarms", "notifications", "offscreen", "storage" ], "manifest_version": 3, "web_accessible_resources": [ { "matches": [ "<all_urls>" ], "resources": [ "./audio/notification.mp3" ] } ] }
Secure Annex (beta)
Coming soon...