[ new scan ] [ statistics ] [ github ] [ twitter ] [ help ]

Grok Button

Version 1.4 View in Chrome Web Store

Last scanned: about 9 hours ago

Extension Details

Rating: 3.0 ★ (2 ratings)

Users: 767

Context-Aware Verdict

MEDIUM

Overall Risk

Trust Factors:

The extension has very limited adoption with only 767 users and minimal feedback (2 ratings with a 3.0 average). The lack of developer information and missing last updated date raises transparency concerns. The extension appears to integrate with Grok (likely X's AI assistant) based on the name and content script targeting X.com, but without a clear description, its exact functionality is unclear.

Concerns:

- Extremely low user base and poor rating suggest limited community validation

- Missing developer information reduces accountability and trustworthiness

- Content scripts run on sensitive platforms including X.com, Google Search, and Wikipedia, potentially accessing user interactions and search queries

- The contextMenus permission combined with activeTab access could allow the extension to capture right-click actions and current page content

- Storage permission enables data collection and retention without clear disclosure of what data is stored

- Vague or missing description makes it difficult to assess if permissions align with stated functionality

Recommendations:

Given the medium risk level and trust concerns, consider running this extension in a separate Chrome profile to isolate potential data access. Monitor your browsing behavior on the targeted sites (X.com, Google, Wikipedia) for any unexpected changes. Consider waiting for more user reviews and developer transparency before installation, or seek alternative extensions with better documentation and community validation.

Findings

MEDIUM

Medium-Risk Permission: activeTab

This extension has the activeTab permission. Can access the active tab when clicking the extension icon.

MEDIUM

Medium-Risk Permission: contextMenus

This extension has the contextMenus permission. Can add items to the context menu.

MEDIUM

Medium-Risk Permission: storage

This extension has the storage permission. Can store data locally.

Raw Manifest

{
  "name": "Grok Button",
  "icons": {
    "16": "/img/slash2-16.png",
    "48": "/img/slash2-64.png",
    "128": "/img/slash2-128.png"
  },
  "action": {
    "default_icon": {
      "16": "/img/slash2-16.png",
      "48": "/img/slash2-64.png",
      "128": "/img/slash2-128.png"
    },
    "default_popup": "popup.html"
  },
  "omnibox": {
    "keyword": "grok"
  },
  "version": "1.4",
  "commands": {
    "_execute_browser_action": {
      "description": "Opens the Grok Button in the omnibox",
      "suggested_key": {
        "mac": "Command+Shift+G",
        "default": "Ctrl+Shift+G"
      }
    }
  },
  "background": {
    "service_worker": "background.js"
  },
  "update_url": "https://clients2.google.com/service/update2/crx",
  "description": "Adds a button to open Grok on X and Google search results",
  "permissions": [
    "contextMenus",
    "activeTab",
    "storage",
    "omnibox"
  ],
  "options_page": "options.html",
  "content_scripts": [
    {
      "js": [
        "contentScript.js"
      ],
      "run_at": "document_idle",
      "matches": [
        "https://x.com/i/*"
      ]
    },
    {
      "js": [
        "googleContentScript.js"
      ],
      "run_at": "document_idle",
      "matches": [
        "https://www.google.com/search*"
      ]
    },
    {
      "js": [
        "wikipediaContentScript.js"
      ],
      "run_at": "document_idle",
      "matches": [
        "https://en.wikipedia.org/wiki/*"
      ]
    }
  ],
  "manifest_version": 3
}

by ✦ Astarte

https://clients2.google.com/service/update2/crx	https://x.com/i/
https://www.google.com/search	https://en.wikipedia.org/wiki/
https://grokbutton.com/g/installed?uuid=	https://grokbutton.com/g/uninstalled?uuid=
https://x.com/i/grok?fromext=1	https://grokipedia.com/page/
https://en.wikipedia.org/wiki/Elon_Musk	https://cdn.jsdelivr.net/npm/daisyui@4.4.17/dist/full.css
https://x.com/i/grok

Grok Button

Extension Details

Context-Aware Verdict

Findings

Security Analysis Details

Required Permissions:

Embedded URLs (11 total):

Raw Manifest

Detections

Manifest Findings