Intention - Stop Mindless Browsing

Version 1.5.0 View in Chrome Web Store

Last scanned: about 3 hours ago

Extension Details

Developer: getintention.com

Rating: 4.9 ★ (981 ratings)

Users: 7,000

Context-Aware Verdict

MEDIUM

Overall Risk

Trust Factors: The extension has a strong reputation with 4.9 stars from nearly 1,000 reviews and 7,000 users, indicating positive user experiences. The purpose of stopping mindless browsing is legitimate and beneficial. The developer domain (getintention.com) suggests a dedicated service focused on productivity and digital wellness.

Concerns: The extension requests several permissions that could be concerning when combined. The unlimitedStorage permission allows indefinite data storage on your device, which could potentially be misused for tracking or data collection beyond what's necessary for blocking mindless browsing. The scripting permission enables code injection into web pages, which while necessary for the extension's functionality, creates potential attack vectors if the extension were compromised. The idle permission can monitor your computer usage patterns, raising privacy considerations about behavioral tracking.

The activeTab permission is reasonable for a browsing control tool, but when combined with scripting capabilities, it grants significant access to webpage content and user interactions.

Recommendations: This extension appears legitimate based on user feedback, but the permission combination warrants caution. Consider running it in a separate Chrome profile if you're concerned about data privacy. Monitor your browsing data usage and review what information the extension collects through its privacy policy. Regularly check for updates to ensure you have the latest security patches.

Findings

MEDIUM

Medium-Risk Permission: activeTab

This extension has the activeTab permission. Can access the active tab when clicking the extension icon.

MEDIUM

Medium-Risk Permission: storage

This extension has the storage permission. Can store data locally.

MEDIUM

Medium-Risk Permission: unlimitedStorage

This extension has the unlimitedStorage permission. Can store unlimited data locally.

Security Analysis Details

Required Permissions:

storage
activeTab
idle
unlimitedStorage
scripting

Optional Permissions:

topSites
notifications

Embedded URLs (99 total):

http://www.w3.org/2000/svg	http://momentjs.com/guides/#/warnings/define-locale/
http://momentjs.com/guides/#/warnings/js-date/	http://momentjs.com/guides/#/warnings/min-max/
http://momentjs.com/guides/#/warnings/add-inverted-param/	http://momentjs.com/guides/#/warnings/zone/
http://momentjs.com/guides/#/warnings/dst-shifted/	https://npms.io/search?q=ponyfill.
https://getintention.com	https://chrome.google.com/webstore/detail/intention/dladanhaondcgpahgiflodhckhoeohoe/reviews
https://x.com/intent/tweet	https://www.facebook.com/sharer/sharer.php
https://www.linkedin.com/sharing/share-offsite/	https://api2.amplitude.com/2/httpapi
https://api.eu.amplitude.com/batch	https://api.eu.amplitude.com/2/httpapi
https://api2.amplitude.com/batch	https://sr-client-cfg.stag2.amplitude.com/config
https://sr-client-cfg.eu.amplitude.com/config	https://sr-client-cfg.amplitude.com/config
https://app.amplitude.com	https://app.eu.amplitude.com
https://apps.stag2.amplitude.com	https://www.docs.developers.amplitude.com/data/sdks/browser-2/#tracking-default-events
https://github.com/uuidjs/uuid#getrandomvalues-not-supported	https://forms.gle/xYu8nnRynqAwqzXt7
https://www.google.com/s2/favicons?domain=	https://addons.mozilla.org/en-US/firefox/addon/intention/
https://www.notion.so/dkthehuman/Intention-Changelog-802db22e062548308402e8f66bc88016	https://forms.gle/f9mHtNR9uPcyHL4YA
https://forms.gle/r84tK9G2EYJrEEhp8	https://www.w3.org/TR/mediaqueries-4/#mq-min-max
https://bugs.webkit.org/show_bug.cgi?id=178261	https://getbootstrap.com/
https://github.com/twbs/bootstrap/blob/main/LICENSE	https://github.com/sass/sass/issues/2383#issuecomment-336349172
https://github.com/necolas/normalize.css	https://developer.mozilla.org/en-US/docs/Web/CSS/:focus-visible
https://developer.paciellogroup.com/blog/2018/03/focus-visible-and-backwards-compatibility/	https://github.com/twbs/bootstrap/issues/19402
https://github.com/twbs/bootstrap/issues/26878	https://github.com/twbs/bootstrap/issues/24093
https://github.com/twbs/bootstrap/pull/30562	https://github.com/twbs/bootstrap/issues/24990
https://github.com/twbs/bootstrap/issues/12359	https://html.spec.whatwg.org/multipage/#the-fieldset-and-legend-elements
https://github.com/twbs/bootstrap/issues/11586.	https://github.com/twbs/rfs/blob/v8.x/LICENSE
https://github.com/twbs/rfs/issues/14	https://github.com/twbs/bootstrap/issues/25195
https://github.com/twbs/bootstrap/issues/18178	https://caniuse.com/css-media-resolution
https://github.com/twbs/bootstrap/pull/11526.	https://github.com/twbs/bootstrap/issues/11655.
https://github.com/twbs/bootstrap/issues/19398.	https://github.com/twbs/bootstrap/issues/28247
https://github.com/sass/sass/issues/1873#issuecomment-152293725	https://github.com/twbs/bootstrap/pull/31557
https://github.com/twbs/bootstrap/pull/27703	https://github.com/twbs/bootstrap/pull/12794
https://github.com/twbs/bootstrap/pull/14559	https://stackoverflow.com/questions/36247140/why-dont-flex-items-shrink-past-content-size
https://useiconic.com/open	https://primer.github.io/.
https://github.com/twbs/bootstrap/pull/22740#issuecomment-305868106	https://github.com/twbs/bootstrap/pull/28855
https://github.com/twbs/bootstrap/issues/29396	https://github.com/philipwalton/flexbugs#flexbug-4
https://developer.mozilla.org/en-US/docs/Web/Events/click#Safari_Mobile	https://github.com/twbs/bootstrap/issues/28341
https://github.com/twbs/bootstrap/pull/10951.	https://bugs.webkit.org/show_bug.cgi?id=158342
https://github.com/twbs/bootstrap/issues/17695	https://github.com/twbs/bootstrap/issues/24800
https://www.a11yproject.com/posts/2013-01-11-how-to-hide-content/	https://kittygiraudel.com/2016/10/13/css-hide-and-seek/
https://github.com/twbs/bootstrap/issues/25686	https://www.w3.org/TR/2013/NOTE-WCAG20-TECHS-20130905/G1
https://stackoverflow.com/questions/16947967/ie10-hover-pseudo-class-doesnt-work-without-background-color	https://github.com/h5bp/main.css/blob/master/src/_print.css

Page 1 of 2

Raw Manifest

{
  "name": "Intention - Stop Mindless Browsing",
  "icons": {
    "16": "assets/icon-16.png",
    "48": "assets/icon-48.png",
    "128": "assets/icon-128.png"
  },
  "action": {
    "default_icon": "assets/icon-16.png",
    "default_popup": "popup.html",
    "default_title": "Intention"
  },
  "version": "1.5.0",
  "incognito": "split",
  "background": {
    "type": "module",
    "service_worker": "background.bundle.js"
  },
  "options_ui": {
    "page": "options.html",
    "open_in_tab": true
  },
  "update_url": "https://clients2.google.com/service/update2/crx",
  "description": "Build the habit of focus.",
  "permissions": [
    "storage",
    "activeTab",
    "idle",
    "unlimitedStorage",
    "scripting"
  ],
  "manifest_version": 3,
  "optional_permissions": [
    "topSites",
    "notifications"
  ],
  "web_accessible_resources": [
    {
      "matches": [
        "<all_urls>"
      ],
      "resources": [
        "assets/icon.svg"
      ]
    }
  ],
  "optional_host_permissions": [
    "<all_urls>"
  ]
}

by ✦ Astarte

Intention - Stop Mindless Browsing

Extension Details

Context-Aware Verdict

Findings

Security Analysis Details

Required Permissions:

Optional Permissions:

Embedded URLs (99 total):

Raw Manifest

Detections

Manifest Findings