[ new scan ] [ statistics ] [ github ] [ twitter ] [ help ]

GPT Master - Chat Power Toolkit

Version 2.36.2 View in Chrome Web Store

Last scanned: about 12 hours ago

Extension Details

Developer: gptmaster.app

Rating: 4.9 ★ (117 ratings)

Users: 20,000

Context-Aware Verdict

HIGH

Overall Risk

Based on 5 total findings, including 3 high-risk findings.

Findings

HIGH

Broad Host Permissions

This extension has broad host permissions allowing it to access many or all websites. This could potentially be used to steal sensitive data or track browsing activity.

HIGH

High-Risk Permission: cookies

This extension has the cookies permission. Can access and modify browser cookies. This could potentially be used maliciously to compromise security or privacy.

HIGH

High-Risk Permission: identity

This extension has the identity permission. Can access your identity information. This could potentially be used maliciously to compromise security or privacy.

MEDIUM

Access to Sensitive Domains

This extension requests access to sensitive domains: https://www.google-analytics.com/*. Ensure you trust this extension with access to these sites.

MEDIUM

Medium-Risk Permission: storage

This extension has the storage permission. Can store data locally.

Security Analysis Details

Required Permissions:

storage
identity
cookies

Host Permissions:

https://chat.openai.com/*
https://chatgpt.com/*
https://www.google-analytics.com/*
https://*.gptmaster.app/*
https://gptmaster.app/*

Content Security Policy:

extension_pages: script-src 'self'; object-src 'self'

Embedded URLs (34 total):

https://chatgpt.com/backend-api	https://github.com/wxt-dev/wxt/issues/371
https://wxt.dev/guide/go-further/testing.html	https://json-schema.org/draft/2020-12/schema
http://json-schema.org/draft-07/schema#	http://json-schema.org/draft-04/schema#
https://api.gptmaster.app	https://api.gptmaster.app/v1/analytics/ga4/events
https://www.google-analytics.com/mp/collect	https://accounts.google.com/o/oauth2/v2/auth
https://gptmaster.app/	https://gptmaster.app/goodbye
https://chat.openai.com/	https://chatgpt.com/
https://gptmaster.app/pro/success	https://www.gptmaster.app/pro/success
https://chatgpt.com	https://chatgpt.com/#gptmaster-upsell=
https://clients2.google.com/service/update2/crx	https://www.google-analytics.com/
https://react.dev/errors/	http://www.w3.org/2000/svg
http://www.w3.org/1998/Math/MathML	http://www.w3.org/1999/xlink
http://www.w3.org/XML/1998/namespace	https://redux.js.org/Errors?code=
http://react-dnd.github.io/react-dnd/docs/api/drag-source-monitor	http://react-dnd.github.io/react-dnd/docs/api/drop-target-monitor
https://reactjs.org/docs/refs-and-the-dom.html#callback-refs	https://react-dnd.github.io/react-dnd/docs/api/use-drag
https://chatgpt.com/c/	https://chromewebstore.google.com/detail/dnamlnpbckbilkmmnbbildmpfkhbnijo/reviews
https://gptmaster.app/features	https://gptmaster.app/privacy-policy

Raw Manifest

{
  "name": "__MSG_extName__",
  "icons": {
    "16": "icon/16.png",
    "32": "icon/32.png",
    "48": "icon/48.png",
    "96": "icon/96.png",
    "128": "icon/128.png"
  },
  "action": {
    "default_popup": "popup.html",
    "default_title": "GPT Master"
  },
  "version": "2.36.2",
  "commands": {
    "open-admin-hub": {
      "description": "Open GPT Master Settings",
      "suggested_key": {
        "mac": "Command+Shift+Comma",
        "default": "Ctrl+Shift+Comma"
      }
    }
  },
  "background": {
    "service_worker": "background.js"
  },
  "update_url": "https://clients2.google.com/service/update2/crx",
  "description": "__MSG_extDescription__",
  "permissions": [
    "storage",
    "identity",
    "cookies"
  ],
  "default_locale": "en",
  "content_scripts": [
    {
      "js": [
        "content-scripts/content.js"
      ],
      "css": [
        "content-scripts/content.css"
      ],
      "matches": [
        "https://chat.openai.com/*",
        "https://chatgpt.com/*"
      ]
    }
  ],
  "host_permissions": [
    "https://chat.openai.com/*",
    "https://chatgpt.com/*",
    "https://www.google-analytics.com/*",
    "https://*.gptmaster.app/*",
    "https://gptmaster.app/*"
  ],
  "manifest_version": 3,
  "content_security_policy": {
    "extension_pages": "script-src 'self'; object-src 'self'"
  },
  "web_accessible_resources": [
    {
      "matches": [
        "https://chatgpt.com/*",
        "https://chat.openai.com/*"
      ],
      "resources": [
        "logo.png",
        "icon/16.png"
      ]
    }
  ]
}

by ✦ Astarte

GPT Master - Chat Power Toolkit

Extension Details

Context-Aware Verdict

Findings

Security Analysis Details

Required Permissions:

Host Permissions:

Content Security Policy:

Embedded URLs (34 total):

Raw Manifest

Detections

Manifest Findings