Starting analysis...
Extension Details
Context-Aware Verdict
The extension has a decent user rating of 4.8 stars from 64 reviews and 1,000 users, suggesting some level of user satisfaction. However, the relatively small user base and lack of detailed developer information raises questions about transparency and accountability. The company name "Clearspace Technologies" suggests a legitimate business entity, but without additional verification details, this cannot be fully confirmed.
The extension's permission set is extremely broad and concerning for what appears to be a productivity or focus tool. The combination of tabs, webNavigation, and scripting permissions with all_urls host access creates a powerful surveillance capability. The extension can monitor every website you visit, track your browsing patterns, inject code into any page, and manipulate browser tabs. The content scripts targeting major social media platforms (LinkedIn, Facebook, Instagram, Twitter, YouTube, Reddit) plus the catch-all all_urls permission means it has unprecedented access to your online activity. This level of access far exceeds what would typically be necessary for most legitimate productivity applications.
Given the critical risk level, avoid installing this extension on your primary browser profile. If you must use it, create a dedicated Chrome profile with limited personal data and avoid accessing sensitive websites while it's active. Consider alternative productivity tools with more restrictive permissions. Regularly review what data the extension might be collecting and consider the privacy implications of such broad access to your browsing activity.
Findings
Security Analysis Details
Required Permissions:
- storage
- tabs
- webNavigation
- scripting
- alarms
Host Permissions:
- <all_urls>
Embedded URLs (36 total):
| https://api.revenuecat.com/v1/subscribers/ | https://api-js.mixpanel.com | |
| https://mixpanel.com | https://cdn.mxpnl.com | |
| http://www.apache.org/licenses/LICENSE-2.0 | https://github.com/uuidjs/uuid#getrandomvalues-not-supported | |
| https://clearspace-server-staging.onrender.com/mixpanel | https://clearspace-server.onrender.com/mixpanel | |
| https://clearspace-web-git-development-clearspace-team.vercel.app | https://app.getclearspace.com | |
| https://clearspace-server-staging.onrender.com | https://clearspace-server.onrender.com | |
| http://www.w3.org/2000/svg | https://clients2.google.com/service/update2/crx | |
| https://www.linkedin.com/ | https://linkedin.com/ | |
| https://www.facebook.com/ | https://facebook.com/ | |
| https://www.instagram.com/ | https://instagram.com/ | |
| https://www.twitter.com/ | https://twitter.com/ | |
| https://x.com/ | https://www.x.com/ | |
| https://www.youtube.com/ | https://youtube.com/ | |
| https://www.reddit.com/ | https://app.getclearspace.com/ | |
| https://reactjs.org/docs/error-decoder.html?invariant= | http://www.w3.org/1999/xlink | |
| http://www.w3.org/XML/1998/namespace | http://www.w3.org/1998/Math/MathML | |
| http://www.w3.org/1999/xhtml | https://chrome.google.com/webstore/detail/clearspace/geebjpiagpchjgjdanomkgjhcjnahjfe/ | |
| https://hooks.slack.com/services/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 | http://jedwatson.github.io/classnames |
Raw Manifest
{ "name": "clearspace", "icons": { "16": "icons/icon16.png", "32": "icons/icon32.png", "48": "icons/icon48.png", "128": "icons/icon128.png" }, "action": { "default_icon": "icons/icon32.png", "default_popup": "src/pages/popup/index.html" }, "version": "0.4.6", "background": { "type": "module", "service_worker": "src/background.js" }, "update_url": "https://clients2.google.com/service/update2/crx", "description": "Enhanced browsing: more focus, less distraction", "permissions": [ "storage", "tabs", "webNavigation", "scripting", "alarms" ], "options_page": "src/pages/options/index.html", "content_scripts": [ { "js": [ "src/feedblocking/blocker.js", "src/feedblocking/linkedin.js" ], "run_at": "document_start", "matches": [ "https://www.linkedin.com/*", "https://linkedin.com/*" ] }, { "js": [ "src/feedblocking/blocker.js", "src/feedblocking/facebook.js" ], "run_at": "document_start", "matches": [ "https://www.facebook.com/*", "https://facebook.com/*" ] }, { "js": [ "src/feedblocking/blocker.js", "src/feedblocking/instagram.js" ], "run_at": "document_start", "matches": [ "https://www.instagram.com/*", "https://instagram.com/*" ] }, { "js": [ "src/feedblocking/blocker.js", "src/feedblocking/twitter.js" ], "run_at": "document_start", "matches": [ "https://www.twitter.com/*", "https://twitter.com/*", "https://x.com/*", "https://www.x.com/*" ] }, { "js": [ "src/feedblocking/blocker.js", "src/feedblocking/youtube.js" ], "run_at": "document_start", "matches": [ "https://www.youtube.com/*", "https://youtube.com/*" ] }, { "js": [ "src/feedblocking/blocker.js", "src/feedblocking/reddit.js" ], "run_at": "document_start", "matches": [ "https://www.reddit.com/*" ] }, { "js": [ "src/feedblocking/reader-mode.js" ], "run_at": "document_start", "matches": [ "<all_urls>" ] }, { "js": [ "src/onboarding.js" ], "run_at": "document_start", "matches": [ "https://app.getclearspace.com/*" ] } ], "host_permissions": [ "<all_urls>" ], "manifest_version": 3, "externally_connectable": { "matches": [ "https://*.getclearspace.com/*" ] }, "web_accessible_resources": [ { "matches": [ "<all_urls>" ], "resources": [ "feedblocking-styles.css" ] } ] }
ⓘ CRXaminer has partnered with our friends at Secure Annex to provide additional findings unique to their platform.
Secure Annex also analyzes extensions from other browsers, IDEs, and can continuously monitor.
This extension may not yet be analyzed by Secure Annex.