CRX aminer
Extension icon

SWATHub Recorder

Version 1.1.0 View in Chrome Web Store

Last scanned: about 6 hours ago

Extension Details

Rating: 4.3 ★
Users: 2

Context-Aware Verdict

CRITICAL
Overall Risk
Trust Factors:

The extension has extremely limited trust indicators with only 2 users and no visible developer information or company reputation. The lack of transparency about the developer, combined with minimal adoption, raises significant red flags. The 4.3 rating appears questionable given the tiny user base.

Concerns:

The extension exhibits multiple high-risk characteristics that are disproportionate to what a typical "recorder" would need. The combination of broad host permissions across all URLs, content script injection capabilities on every website, and web navigation tracking creates an extensive attack surface. The native messaging permission allows communication with local applications, which could enable data exfiltration or system compromise. For a recording tool, these permissions seem excessive and unnecessary.

The webNavigation permission enables comprehensive browsing surveillance, while the broad content script injection could facilitate credential theft, session hijacking, or malicious code execution on any website you visit. The <all_urls> host permissions essentially give this extension unrestricted access to your entire web browsing experience.

Recommendations:

Do not install this extension. If you absolutely must use it for legitimate purposes, create a completely isolated Chrome profile with no saved passwords, personal data, or access to sensitive websites. Consider using established, well-reviewed screen recording alternatives instead. The risk-to-benefit ratio is extremely unfavorable given the minimal user base and excessive permissions.

Findings

HIGH
Broad Content Script Injection
This extension can inject scripts into any website. This means it could potentially read sensitive data, modify website content, or steal credentials.
HIGH
Broad Host Permissions
This extension has broad host permissions allowing it to access many or all websites. This could potentially be used to steal sensitive data or track browsing activity.
HIGH
High-Risk Permission: webNavigation
This extension has the webNavigation permission. Can track your web navigation. This could potentially be used maliciously to compromise security or privacy.
MEDIUM
Medium-Risk Permission: activeTab
This extension has the activeTab permission. Can access the active tab when clicking the extension icon.