Extension Details
Context-Aware Verdict
The extension has very limited user adoption with only 503 users and a single rating, making it difficult to establish reliability through community validation. The lack of developer information, company details, and recent update history raises transparency concerns. While the 4.0 rating is positive, it's based on insufficient data to be meaningful. The extension appears to be a simple word game, which aligns with its minimal permissions profile.
While the technical security findings show minimal risk, the lack of transparency and community validation warrant caution. Consider using this extension in a separate Chrome profile to isolate any potential risks from your main browsing environment. Monitor the extension's behavior closely and be prepared to remove it if you notice any unusual activity. Look for alternative word game extensions with larger user bases, verified developers, and regular updates if you want a more established option. The minimal permissions are encouraging, but the overall lack of information suggests proceeding with measured caution.
Findings
Security Analysis Details
Embedded URLs (19 total):
| https://zillakgames.com/ | https://getbootstrap.com/ | |
| https://github.com/twbs/bootstrap/blob/main/LICENSE | http://www.w3.org/2000/svg | |
| http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd | http://demonisblack.com/code/quizgame/game/share.jpg | |
| http://demonisblack.com/code/quizgame/game/ | https://zillakgames.com/game/quiz-game/ | |
| http://detectmobilebrowser.com/ | http://createjs.com/ | |
| http://www.opensource.org/licenses/mit-license.html | http://modernizr.com/download/#-fontface-backgroundsize-borderimage-borderradius-boxshadow-flexbox-hsla-multiplebgs-opacity-rgba-textshadow-cssanimations-csscolumns-generatedcontent-cssgradients-cssreflections-csstransforms-csstransforms3d-csstransitions-applicationcache-canvas-canvastext-draganddrop-hashchange-history-audio-video-indexeddb-input-inputtypes-localstorage-postmessage-sessionstorage-websockets-websqldatabase-webworkers-geolocation-inlinesvg-smil-svg-svgclippaths-touch-webgl-shiv-mq-cssclasses-addtest-prefixed-teststyles-testprop-testallprops-hasevent-prefixes-domprefixes-load | |
| http://code.google.com/p/swfobject/ | http://greensock.com | |
| http://greensock.com/standard-license | http://www.w3.org/1999/xhtml | |
| https://clients2.google.com/service/update2/crx | http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd | |
| https://www.facebook.com/2008/fbml |
Raw Manifest
{ "name": "__MSG_appName__", "icons": { "16": "icons/icon-16.png", "32": "icons/icon-32.png", "128": "icons/icon-128.png" }, "action": { "default_icon": "icons/icon-128.png", "default_popup": "popup.html", "default_title": "Quiz Game" }, "version": "4", "background": { "service_worker": "javas/anainout.js" }, "update_url": "https://clients2.google.com/service/update2/crx", "description": "__MSG_appDesc__", "homepage_url": "https://zillakgames.com/game/quiz-game/", "default_locale": "en", "offline_enabled": true, "manifest_version": 3 }
ⓘ CRXaminer has partnered with our friends at Secure Annex to provide additional findings unique to their platform.
Secure Annex also analyzes extensions from other browsers, IDEs, and can continuously monitor.
This extension may not yet be analyzed by Secure Annex.