Intention - Stop Mindless Browsing

Version 1.5.0 View in Chrome Web Store

Last scanned: 23 days ago | force re-scan

Extension Details

Developer: getintention.com

Rating: 4.9 ★ (985 ratings)

Users: 7,000

Context-Aware Verdict

MEDIUM

Overall Risk

Trust Factors: The extension has a strong user base with 7,000 users and an excellent 4.9-star rating from nearly 1,000 reviews, indicating high user satisfaction. The purpose of stopping mindless browsing is legitimate and beneficial for productivity. The developer maintains a dedicated website (getintention.com), suggesting professional development. The extension uses Manifest V3, which provides better security standards.

Concerns: The combination of storage, unlimitedStorage, and activeTab permissions creates moderate privacy risks. The extension can access and store unlimited data about your active browsing sessions, potentially building detailed profiles of your web activity. The scripting permission allows code injection into web pages, which could be misused if the extension were compromised. For a browsing control tool, these permissions are somewhat expected but still represent data collection capabilities that users should be aware of.

Recommendations: This extension appears legitimate given its purpose and user feedback, but consider running it in a separate Chrome profile if you're particularly privacy-conscious. Review the extension's privacy policy on their website to understand what data is collected and stored. Monitor your browsing data usage and consider periodically clearing the extension's stored data through Chrome settings. The risk is primarily around data privacy rather than malicious behavior, making it suitable for most users who want mindful browsing assistance.

Findings

MEDIUM

Medium-Risk Permission: activeTab

This extension has the activeTab permission. Can access the active tab when clicking the extension icon.

MEDIUM

Medium-Risk Permission: storage

This extension has the storage permission. Can store data locally.

MEDIUM

Medium-Risk Permission: unlimitedStorage

This extension has the unlimitedStorage permission. Can store unlimited data locally.

Security Analysis Details

Required Permissions:

storage
activeTab
idle
unlimitedStorage
scripting

Optional Permissions:

topSites
notifications

Embedded URLs (99 total):

http://www.w3.org/2000/svg	http://momentjs.com/guides/#/warnings/define-locale/
http://momentjs.com/guides/#/warnings/js-date/	http://momentjs.com/guides/#/warnings/min-max/
http://momentjs.com/guides/#/warnings/add-inverted-param/	http://momentjs.com/guides/#/warnings/zone/
http://momentjs.com/guides/#/warnings/dst-shifted/	https://npms.io/search?q=ponyfill.
https://getintention.com	https://chrome.google.com/webstore/detail/intention/dladanhaondcgpahgiflodhckhoeohoe/reviews
https://x.com/intent/tweet	https://www.facebook.com/sharer/sharer.php
https://www.linkedin.com/sharing/share-offsite/	https://api2.amplitude.com/2/httpapi
https://api.eu.amplitude.com/batch	https://api.eu.amplitude.com/2/httpapi
https://api2.amplitude.com/batch	https://sr-client-cfg.stag2.amplitude.com/config
https://sr-client-cfg.eu.amplitude.com/config	https://sr-client-cfg.amplitude.com/config
https://app.amplitude.com	https://app.eu.amplitude.com
https://apps.stag2.amplitude.com	https://www.docs.developers.amplitude.com/data/sdks/browser-2/#tracking-default-events
https://github.com/uuidjs/uuid#getrandomvalues-not-supported	https://forms.gle/xYu8nnRynqAwqzXt7
https://www.google.com/s2/favicons?domain=	https://addons.mozilla.org/en-US/firefox/addon/intention/
https://www.notion.so/dkthehuman/Intention-Changelog-802db22e062548308402e8f66bc88016	https://forms.gle/f9mHtNR9uPcyHL4YA
https://forms.gle/r84tK9G2EYJrEEhp8	https://www.w3.org/TR/mediaqueries-4/#mq-min-max
https://bugs.webkit.org/show_bug.cgi?id=178261	https://getbootstrap.com/
https://github.com/twbs/bootstrap/blob/main/LICENSE	https://github.com/sass/sass/issues/2383#issuecomment-336349172
https://github.com/necolas/normalize.css	https://developer.mozilla.org/en-US/docs/Web/CSS/:focus-visible
https://developer.paciellogroup.com/blog/2018/03/focus-visible-and-backwards-compatibility/	https://github.com/twbs/bootstrap/issues/19402
https://github.com/twbs/bootstrap/issues/26878	https://github.com/twbs/bootstrap/issues/24093
https://github.com/twbs/bootstrap/pull/30562	https://github.com/twbs/bootstrap/issues/24990
https://github.com/twbs/bootstrap/issues/12359	https://html.spec.whatwg.org/multipage/#the-fieldset-and-legend-elements
https://github.com/twbs/bootstrap/issues/11586.	https://github.com/twbs/rfs/blob/v8.x/LICENSE
https://github.com/twbs/rfs/issues/14	https://github.com/twbs/bootstrap/issues/25195
https://github.com/twbs/bootstrap/issues/18178	https://caniuse.com/css-media-resolution
https://github.com/twbs/bootstrap/pull/11526.	https://github.com/twbs/bootstrap/issues/11655.
https://github.com/twbs/bootstrap/issues/19398.	https://github.com/twbs/bootstrap/issues/28247
https://github.com/sass/sass/issues/1873#issuecomment-152293725	https://github.com/twbs/bootstrap/pull/31557
https://github.com/twbs/bootstrap/pull/27703	https://github.com/twbs/bootstrap/pull/12794
https://github.com/twbs/bootstrap/pull/14559	https://stackoverflow.com/questions/36247140/why-dont-flex-items-shrink-past-content-size
https://useiconic.com/open	https://primer.github.io/.
https://github.com/twbs/bootstrap/pull/22740#issuecomment-305868106	https://github.com/twbs/bootstrap/pull/28855
https://github.com/twbs/bootstrap/issues/29396	https://github.com/philipwalton/flexbugs#flexbug-4
https://developer.mozilla.org/en-US/docs/Web/Events/click#Safari_Mobile	https://github.com/twbs/bootstrap/issues/28341
https://github.com/twbs/bootstrap/pull/10951.	https://bugs.webkit.org/show_bug.cgi?id=158342
https://github.com/twbs/bootstrap/issues/17695	https://github.com/twbs/bootstrap/issues/24800
https://www.a11yproject.com/posts/2013-01-11-how-to-hide-content/	https://kittygiraudel.com/2016/10/13/css-hide-and-seek/
https://github.com/twbs/bootstrap/issues/25686	https://www.w3.org/TR/2013/NOTE-WCAG20-TECHS-20130905/G1
https://stackoverflow.com/questions/16947967/ie10-hover-pseudo-class-doesnt-work-without-background-color	https://github.com/h5bp/main.css/blob/master/src/_print.css

Page 1 of 2

Raw Manifest

{
  "name": "Intention - Stop Mindless Browsing",
  "icons": {
    "16": "assets/icon-16.png",
    "48": "assets/icon-48.png",
    "128": "assets/icon-128.png"
  },
  "action": {
    "default_icon": "assets/icon-16.png",
    "default_popup": "popup.html",
    "default_title": "Intention"
  },
  "version": "1.5.0",
  "incognito": "split",
  "background": {
    "type": "module",
    "service_worker": "background.bundle.js"
  },
  "options_ui": {
    "page": "options.html",
    "open_in_tab": true
  },
  "update_url": "https://clients2.google.com/service/update2/crx",
  "description": "Build the habit of focus.",
  "permissions": [
    "storage",
    "activeTab",
    "idle",
    "unlimitedStorage",
    "scripting"
  ],
  "manifest_version": 3,
  "optional_permissions": [
    "topSites",
    "notifications"
  ],
  "web_accessible_resources": [
    {
      "matches": [
        "<all_urls>"
      ],
      "resources": [
        "assets/icon.svg"
      ]
    }
  ],
  "optional_host_permissions": [
    "<all_urls>"
  ]
}

by ✦ Astarte

Intention - Stop Mindless Browsing

Extension Details

Context-Aware Verdict

Findings

Security Analysis Details

Required Permissions:

Optional Permissions:

Embedded URLs (99 total):

Raw Manifest

Detections

Manifest Findings