[ new scan ] [ statistics ] [ github ] [ twitter ] [ help ]

Birdie

Version 0.7.33 View in Chrome Web Store

Last scanned: about 11 hours ago

Extension Details

Developer: birdie.so

Rating: 5.0 ★ (6 ratings)

Users: 3,000

Context-Aware Verdict

CRITICAL

Overall Risk

Trust Factors:

The extension has very limited trust indicators with only 3,000 users and just 6 reviews, despite a perfect 5.0 rating. The developer "birdie.so" lacks established reputation or transparency about their identity and business practices. The missing description is particularly concerning as users cannot understand what the extension actually does or why it needs such extensive permissions.

Concerns:

The extension requests an extremely broad set of permissions that would be excessive for most legitimate use cases. The combination of tabCapture, desktopCapture, and webRequest permissions suggests screen recording and network monitoring capabilities. The broad host permissions covering all websites (<all_urls>) combined with scripting permissions creates potential for data harvesting across the entire web. The unsafe WebAssembly execution policy could hide malicious code, while the downloads permission adds file system access risks. Most concerning is the lack of any description to justify these powerful permissions.

Recommendations:

Do not install this extension given the critical risk level and lack of transparency. If you must use it, run it in a completely isolated Chrome profile with no access to personal accounts or sensitive data. Consider alternative extensions with clearer purposes and more limited permissions. The combination of extensive permissions, minimal user base, and missing description strongly suggests this extension poses significant security and privacy risks that outweigh any potential benefits.

Findings

HIGH

Broad Host Permissions

This extension has broad host permissions allowing it to access many or all websites. This could potentially be used to steal sensitive data or track browsing activity.

HIGH

High-Risk Permission: downloads

This extension has the downloads permission. Can download files and access download history. This could potentially be used maliciously to compromise security or privacy.

HIGH

High-Risk Permission: tabs

This extension has the tabs permission. Can access browser tab information and manipulate tabs. This could potentially be used maliciously to compromise security or privacy.

HIGH

High-Risk Permission: webRequest

This extension has the webRequest permission. Can intercept and modify web requests. This could potentially be used maliciously to compromise security or privacy.

HIGH

Unsafe WebAssembly Execution

This extension's Content Security Policy allows 'wasm-unsafe-eval', which permits potentially dangerous WebAssembly code execution. This could be used to hide malicious code or perform CPU-intensive operations.

MEDIUM

Medium-Risk Permission: activeTab

This extension has the activeTab permission. Can access the active tab when clicking the extension icon.

MEDIUM

Medium-Risk Permission: contextMenus

This extension has the contextMenus permission. Can add items to the context menu.

MEDIUM

Medium-Risk Permission: notifications

This extension has the notifications permission. Can show notifications.

MEDIUM

Medium-Risk Permission: storage

This extension has the storage permission. Can store data locally.

Security Analysis Details

Required Permissions:

storage
contextMenus
tabs
activeTab
tabCapture
offscreen
scripting
desktopCapture
webRequest
downloads
notifications
alarms

Host Permissions:

https://*/*
http://*/*
<all_urls>
file:///*

Content Security Policy:

extension_pages: script-src 'self' 'wasm-unsafe-eval'; object-src 'self'

Embedded URLs (19 total):

https://clients2.google.com/service/update2/crx	http://www.w3.org/2000/svg
https://www.google.com/favicon.ico?	https://app.birdie.so/library/personal
https://www.birdie.so/help	https://app.birdie.so
https://app.birdie.test	https://www.birdie.so/uninstall/extension?email=
https://app.birdie.test/	https://docs.birdie.so/birdie-docs/troubleshooting/extension/error-this-page-cannot-be-scripted-due-to-an-extensionssettings-policy
http://www.example.com	https://vuejs.org/error-reference/#runtime-
http://www.w3.org/1998/Math/MathML	http://www.w3.org/1999/xlink
https://clipboardjs.com/	https://web.dev/cross-origin-isolation-guide/
http://www.apache.org/licenses/LICENSE-2.0	https://182755b3eae849739ff6e9f488ea0a4c@o739267.ingest.us.sentry.io/4508803055222784
http://www.w3.org/1999/xhtml

Raw Manifest

{
  "name": "Birdie",
  "icons": {
    "16": "images/icon-16x16.png",
    "48": "images/icon-48x48.png",
    "128": "images/icon-128x128.png"
  },
  "action": {
    "default_icon": {
      "16": "images/icon-16x16.png",
      "48": "images/icon-48x48.png",
      "128": "images/icon-128x128.png"
    }
  },
  "version": "0.7.33",
  "commands": {
    "draw-shortcut": {
      "description": "Enable/Disable Drawing",
      "suggested_key": {
        "mac": "Command+Shift+E",
        "default": "Ctrl+Shift+E"
      }
    },
    "pause-recording-shortcut": {
      "description": "Pause/Resume Recording",
      "suggested_key": {
        "mac": "Command+Shift+P",
        "default": "Ctrl+Shift+P"
      }
    },
    "start-recording-shortcut": {
      "description": "Start/Stop Recording",
      "suggested_key": {
        "mac": "Command+Shift+S",
        "default": "Ctrl+Shift+S"
      }
    }
  },
  "incognito": "spanning",
  "background": {
    "type": "module",
    "service_worker": "js/background.js"
  },
  "update_url": "https://clients2.google.com/service/update2/crx",
  "description": "Record your screen, capture logs, and document repro steps—all in one click. Simplify bug reporting and speed up issue resolution.",
  "permissions": [
    "storage",
    "contextMenus",
    "tabs",
    "activeTab",
    "tabCapture",
    "offscreen",
    "scripting",
    "desktopCapture",
    "webRequest",
    "downloads",
    "notifications",
    "alarms"
  ],
  "version_name": "0.7.33",
  "content_scripts": [
    {
      "js": [
        "js/content_handle.js"
      ],
      "run_at": "document_start",
      "matches": [
        "https://*/*",
        "http://*/*"
      ]
    },
    {
      "js": [
        "js/content_birdie.js"
      ],
      "run_at": "document_start",
      "matches": [
        "https://*.birdie.test/*",
        "https://*.birdie.so/*",
        "https://localhost:5173/*"
      ]
    }
  ],
  "host_permissions": [
    "https://*/*",
    "http://*/*",
    "<all_urls>",
    "file:///*"
  ],
  "manifest_version": 3,
  "minimum_chrome_version": "116",
  "content_security_policy": {
    "extension_pages": "script-src 'self' 'wasm-unsafe-eval'; object-src 'self'"
  },
  "web_accessible_resources": [
    {
      "matches": [
        "<all_urls>",
        "chrome-extension://*/*"
      ],
      "resources": [
        "src/video.html",
        "js/video.js",
        "src/grantmic.html",
        "js/grantmic.js",
        "src/desktopRecord.html",
        "js/desktopRecordjs.js",
        "src/offscreen.html",
        "js/offscreenjs.js",
        "src/soundlevel.html",
        "js/soundleveljs.js",
        "js/birdie_logger.js",
        "js/init_pristine.js",
        "vad/vad.worklet.bundle.min.js",
        "vad/silero_vad_legacy.onnx",
        "vad/*.wasm",
        "vad/*.mjs",
        "content.css"
      ]
    }
  ]
}

by ✦ Astarte

Birdie

Extension Details

Context-Aware Verdict

Findings

Security Analysis Details

Required Permissions:

Host Permissions:

Content Security Policy:

Embedded URLs (19 total):

Raw Manifest

Detections

Manifest Findings