YT Bookmarker

Version 1.1.0 View in Chrome Web Store

Last scanned: 1 day ago | force re-scan

Extension Details

Rating: 4.6 ★ (7 ratings)

Users: 594

Context-Aware Verdict

HIGH

Overall Risk

Trust Factors: The extension has a very small user base of only 594 users, which limits community validation. While it maintains a decent 4.6-star rating, this is based on only 7 reviews, making it statistically insignificant. The lack of visible developer information raises transparency concerns, and no company reputation can be established.

Concerns: The extension requests excessive permissions for a YouTube bookmarking tool. The tabs permission allows manipulation of browser tabs beyond what's necessary for bookmarking functionality. The webNavigation permission enables comprehensive tracking of your browsing behavior across all websites, which is unnecessary for managing YouTube bookmarks. The broad host permissions to all YouTube domains, while somewhat justified, combined with other permissions creates a concerning permission profile that could enable data collection or privacy violations far beyond the stated purpose.

Recommendations: Given the high-risk permission combination and limited user validation, consider running this extension in a separate Chrome profile to isolate potential security risks. Look for alternative YouTube bookmarking extensions with larger user bases, better developer transparency, and more restrictive permissions. If you must use this extension, regularly review your YouTube activity and consider whether the bookmarking functionality justifies the extensive access permissions. Monitor for any unusual browser behavior or unexpected data usage while the extension is active.

Findings

HIGH

Broad Host Permissions

This extension has broad host permissions allowing it to access many or all websites. This could potentially be used to steal sensitive data or track browsing activity.

HIGH

High-Risk Permission: tabs

This extension has the tabs permission. Can access browser tab information and manipulate tabs. This could potentially be used maliciously to compromise security or privacy.

HIGH

High-Risk Permission: webNavigation

This extension has the webNavigation permission. Can track your web navigation. This could potentially be used maliciously to compromise security or privacy.

MEDIUM

Medium-Risk Permission: storage

This extension has the storage permission. Can store data locally.

Raw Manifest

{
  "name": "YT Bookmarker",
  "action": {
    "default_icon": {
      "16": "assets/ext-icon.png",
      "24": "assets/ext-icon.png",
      "32": "assets/ext-icon.png"
    },
    "default_popup": "popup.html",
    "default_title": "YT Bookmarker"
  },
  "version": "1.1.0",
  "background": {
    "service_worker": "background.js"
  },
  "update_url": "https://clients2.google.com/service/update2/crx",
  "description": "Add bookmarks and notes to Youtube videos",
  "permissions": [
    "storage",
    "tabs",
    "webNavigation"
  ],
  "content_scripts": [
    {
      "js": [
        "contentScript.js"
      ],
      "matches": [
        "https://*.youtube.com/*"
      ]
    }
  ],
  "host_permissions": [
    "https://*.youtube.com/*"
  ],
  "manifest_version": 3,
  "web_accessible_resources": [
    {
      "matches": [
        "https://*.youtube.com/*"
      ],
      "resources": [
        "assets/bookmark.png",
        "assets/play.png",
        "assets/delete.png",
        "assets/save.png"
      ]
    }
  ]
}

by ✦ Astarte

YT Bookmarker

Extension Details

Context-Aware Verdict

Findings

Security Analysis Details

Required Permissions:

Host Permissions:

Embedded URLs (1 total):

Raw Manifest

Detections

Manifest Findings