[ new scan ] [ statistics ] [ github ] [ twitter ] [ help ]

Reddit PGN viewer.

Version 1.96.0 View in Chrome Web Store

Last scanned: about 12 hours ago

Extension Details

Rating: 4.2 ★ (28 ratings)

Users: 1,000

Context-Aware Verdict

LOW

Overall Risk

Trust Factors:

The extension has a focused purpose for chess enthusiasts on Reddit, with a decent rating of 4.2 stars from 28 reviews. However, the small user base of only 1,000 users and lack of developer information raises some transparency concerns. The extension appears to serve a legitimate niche function for viewing chess PGN (Portable Game Notation) files on Reddit.

Concerns:

- Uses the older Manifest V2, which has weaker security protections compared to V3

- Limited developer information provided, reducing accountability

- Small user base makes it harder to assess real-world security through community vetting

- No information about last update date, which could indicate maintenance status

The extension's permissions are appropriately scoped to Reddit domains only, which is exactly what you'd expect for a Reddit-specific chess tool. The content script injection is necessary for the extension's functionality to parse and display chess games on Reddit pages.

Recommendations:

This extension presents minimal security risk for its intended purpose. The permissions are well-justified and narrowly scoped. However, consider monitoring for updates to Manifest V3, and be aware that the small developer presence means less community oversight. The extension is safe to use for chess enthusiasts who frequently view PGN files on Reddit, but users should stay alert for any unusual behavior given the limited transparency about the developer.

Findings

MEDIUM

Older Manifest Version

This extension uses Manifest Version 2, which has fewer security restrictions than Manifest V3. Consider using extensions that have upgraded to V3.

Raw Manifest

{
  "key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC+mX0OyPs/T1z+/DDeFSmp/9/qEdMYdC04dM87oBObtXqjsPEmGsuhLyZ4LkhBnOLdjAFc9niSsdjGDDjFTTCpwpqpJbfTxwLy3/xGYOFLLtIBGu3MzPzgONzxvQI7dCJrVeKk+5M57sIC4qLSDtMqknO7FW1/vF1/s56cSJzKCQIDAQAB",
  "name": "Reddit PGN viewer.",
  "icons": {
    "128": "knight.png"
  },
  "version": "1.96.0",
  "update_url": "http://clients2.google.com/service/update2/crx",
  "description": "Puts a board in all Reddit pages with PGNs marked by [pgn][/pgn]",
  "permissions": [
    "*://*.reddit.com/*"
  ],
  "content_scripts": [
    {
      "js": [
        "jquery-3.3.1.min.js",
        "pgnyui.js",
        "pgnviewer.js",
        "rchesspgn.js"
      ],
      "css": [
        "board-min.css",
        "rchess.css"
      ],
      "matches": [
        "*://*.reddit.com/*"
      ]
    }
  ],
  "manifest_version": 2
}

by ✦ Astarte

http://clients2.google.com/service/update2/crx	http://creativecommons.org/licenses/by-nc-nd/2.5/au/
http://chesstempo.com	http://developer.yahoo.com/yui/license.html
http://www.chesstempo.com

Reddit PGN viewer.

Extension Details

Context-Aware Verdict

Findings

Security Analysis Details

Required Permissions:

Embedded URLs (5 total):

Raw Manifest

Detections

Manifest Findings