Extension Details
Rating:
3.9 ★
(15 ratings)
Size:
229KiB
Last Updated:
April 10, 2025
Users:
9,000
Context-Aware Verdict
This section provides a Claude-based AI analysis that applies additional context to the risk. Results are not guaranteed to be accurate.
HIGH
Risk Level
Trust Factors:
- The extension has a relatively low number of users (9,000) and ratings (15), which could indicate a lack of widespread trust or popularity.
- The lack of developer information or a reputable company associated with the extension raises concerns about its legitimacy and trustworthiness.
Concerns:
- The extension requests the "activeTab" permission, which allows it to access the currently active tab, potentially exposing sensitive information.
- The "storage" permission enables the extension to store data locally, which could be misused to store user data without consent.
- The broad "<all_urls>" host permission is a significant concern, as it grants the extension access to all websites, potentially enabling tracking, data theft, or other malicious activities.
Recommendations:
- Exercise caution when installing this extension, as the lack of developer information and broad permissions raise significant security concerns.
- If you decide to use this extension, consider running it in a separate Chrome profile or incognito mode to isolate it from your main browsing activity.
- Regularly review the extension's permissions and activity, and promptly remove it if any suspicious behavior is detected.
- Consider using alternative extensions from reputable developers or companies with a proven track record of security and privacy practices.
Security Analysis
This section provides a detailed analysis of the extension's security posture, without broader context. Assumes worst-case impact.
MEDIUM
Overall Risk
Based on 3 total findings, ranked without considering overall context, including 1 high-risk and 2 medium-risk findings.
HIGH
Broad Host Permissions
This extension has broad host permissions allowing it to access many or all websites. This could potentially be used to steal sensitive data or track browsing activity.
MEDIUM
Medium-Risk Permission: activeTab
This extension has the activeTab permission. Can access the active tab when clicking the extension icon.
MEDIUM
Medium-Risk Permission: storage
This extension has the storage permission. Can store data locally.
Security Analysis Details
Required Permissions:
- scripting
- activeTab
- storage
Host Permissions:
- <all_urls>
Embedded URLs (11 total):
| https://fonts.googleapis.com/icon?family=Material+Icons | https://blockdev.app/image-downloader/installed | |
| https://blockdev.app/image-downloader/uninstalled | https://fonts.googleapis.com/css2?family=Roboto:wght@300 | |
| https://clients2.google.com/service/update2/crx | https://forms.gle/9N1Z4ZTPWoS2r7356 | |
| https://chromewebstore.google.com/detail/image-downloader/hohnpmioogigogdedhigjpjjjonkojbk/reviews | http://stuartk.com/jszip | |
| https://raw.github.com/Stuk/jszip/main/LICENSE.markdown. | https://github.com/nodeca/pako/blob/main/LICENSE | |
| https://stuk.github.io/jszip/documentation/howto/read_zip.html |
Raw Manifest
{ "name": "__MSG_appName__", "icons": { "16": "icons/16.png", "32": "icons/32.png", "48": "icons/48.png", "128": "icons/128.png" }, "action": { "default_popup": "popup.html" }, "author": "Image Downloader Team", "version": "3.1.1", "commands": { "toggle-feature": { "description": "Toggle image download panel", "suggested_key": { "mac": "Command+Shift+I", "default": "Ctrl+Shift+I" } } }, "background": { "type": "module", "service_worker": "background.js" }, "update_url": "https://clients2.google.com/service/update2/crx", "description": "__MSG_shortDesc__", "permissions": [ "scripting", "activeTab", "storage" ], "default_locale": "en", "host_permissions": [ "<all_urls>" ], "manifest_version": 3 }
Secure Annex (beta)
Coming soon...