[ new scan ] [ statistics ] [ github ] [ twitter ] [ help ]

chatGPT notification

Version 0.0.3 View in Chrome Web Store

Last scanned: about 5 hours ago

Extension Details

Rating: 2.7 ★ (6 ratings)

Users: 543

Context-Aware Verdict

MEDIUM

Overall Risk

Trust Factors:

The extension has very limited adoption with only 543 users and a concerning low rating of 2.7 out of 5 from just 6 reviews, suggesting user dissatisfaction. The lack of author information and developer details raises transparency concerns. The extension appears to be in early development (version 0.0.3) and lacks proper documentation or clear functionality description.

Concerns:

- Content scripts run on all HTTP and HTTPS websites, which is extremely broad access for a notification extension

- The combination of universal web access with storage permissions creates potential for data collection across all browsing activity

- Poor user ratings indicate possible functionality issues or unwanted behavior

- Anonymous developer with no contact information or company backing

- Vague description provides no clear explanation of what the extension actually does

- Early version number suggests potentially unstable or incomplete functionality

Recommendations:

Given the broad permissions and low user satisfaction, consider running this extension in a separate Chrome profile if you must use it. The universal content script access is excessive for a simple notification tool. Look for alternative ChatGPT notification extensions from established developers with better ratings and more transparent permission usage. Monitor the extension's behavior closely and remove it if you notice any unexpected activity or performance issues.

Findings

MEDIUM

Medium-Risk Permission: storage

This extension has the storage permission. Can store data locally.

Raw Manifest

{
  "name": "chatGPT notification",
  "icons": {
    "16": "img/logo-16.png",
    "19": "img/logo-19.png",
    "38": "img/logo-38.png",
    "48": "img/logo-48.png",
    "128": "img/logo-128.png"
  },
  "action": {
    "default_icon": "img/logo-48.png",
    "default_popup": "popup.html"
  },
  "version": "0.0.3",
  "background": {
    "type": "module",
    "service_worker": "service-worker-loader.js"
  },
  "update_url": "https://clients2.google.com/service/update2/crx",
  "description": "Get a sound notification when a chatGPT generation is done",
  "permissions": [
    "storage"
  ],
  "content_scripts": [
    {
      "js": [
        "assets/content-script-loader.chunk-048d5bf0.e47ff74d.js"
      ],
      "matches": [
        "http://*/*",
        "https://*/*"
      ]
    }
  ],
  "manifest_version": 3,
  "web_accessible_resources": [
    {
      "matches": [
        "<all_urls>"
      ],
      "resources": [
        "img/logo-16.png",
        "img/logo-19.png",
        "img/logo-38.png",
        "img/logo-48.png",
        "img/logo-128.png",
        "audio/notification.mp3"
      ],
      "use_dynamic_url": false
    },
    {
      "matches": [
        "http://*/*",
        "https://*/*"
      ],
      "resources": [
        "assets/chunk-048d5bf0.js"
      ],
      "use_dynamic_url": true
    }
  ]
}

by ✦ Astarte

https://reactjs.org/docs/error-decoder.html?invariant=	http://www.w3.org/1999/xlink
http://www.w3.org/XML/1998/namespace	http://www.w3.org/2000/svg
http://www.w3.org/1998/Math/MathML	http://www.w3.org/1999/xhtml
https://clients2.google.com/service/update2/crx

chatGPT notification

Extension Details

Context-Aware Verdict

Findings

Security Analysis Details

Required Permissions:

Embedded URLs (7 total):

Raw Manifest

Detections

Manifest Findings