CRX aminer
Extension icon

WebRTC Control

Version 0.3.4 View in Chrome Web Store

Last scanned: about 12 hours ago

Extension Details

Rating: 4.5 ★ (212 ratings)
Users: 200,000

Context-Aware Verdict

HIGH
Overall Risk
Trust Factors:

The extension has a solid user base of 200,000 users and maintains a good rating of 4.5 stars from 212 reviews, suggesting general user satisfaction. The name "WebRTC Control" clearly indicates its purpose of managing WebRTC settings, which aligns with the privacy permission usage. However, the lack of visible developer information reduces transparency and accountability.

Concerns:

The combination of privacy permission with broad content script injection across all websites creates significant security exposure. While privacy permission is necessary for WebRTC control, the universal content script access means the extension can read and modify any webpage you visit, potentially capturing sensitive information like passwords, personal data, or financial details. The storage permission, while common, allows data persistence that could be misused. The contextMenus permission is relatively benign but adds to the overall permission footprint.

Recommendations:

Consider running this extension in a separate Chrome profile dedicated to privacy-focused browsing to limit exposure of your main browsing data. Before installation, verify the extension's source and check recent reviews for any security concerns. Monitor your browser's performance and network activity after installation. If you only need WebRTC control occasionally, consider using browser flags or temporary solutions instead of a persistent extension. Regularly review the extension's permissions and remove it if you notice any suspicious behavior or if your WebRTC control needs change.

Findings

HIGH
Broad Content Script Injection
This extension can inject scripts into any website. This means it could potentially read sensitive data, modify website content, or steal credentials.
HIGH
High-Risk Permission: privacy
This extension has the privacy permission. Can modify privacy settings. This could potentially be used maliciously to compromise security or privacy.
MEDIUM
Medium-Risk Permission: contextMenus
This extension has the contextMenus permission. Can add items to the context menu.
MEDIUM
Medium-Risk Permission: storage
This extension has the storage permission. Can store data locally.