Extension Details
Context-Aware Verdict
The extension has very limited trust indicators with only 1,000 users and a single 5-star rating, which is insufficient to establish credibility. The developer domain "vahiddm.com" lacks recognizable brand authority, and the absence of detailed developer information raises transparency concerns. The extension's narrow focus on Power BI auto-refresh functionality appears legitimate for its stated purpose.
The tabs permission is excessive for an auto-refresh tool and creates significant security risks by allowing tab manipulation and access to browsing information. While host permissions are appropriately scoped to Power BI domains rather than all websites, the combination of tabs and scripting permissions could enable malicious activities beyond the extension's stated functionality. The storage permission, though lower risk, adds to the overall attack surface. The low user base and minimal rating history make it difficult to verify the extension's behavior in practice.
Consider running this extension in a separate Chrome profile dedicated to Power BI work to isolate potential risks. Monitor the extension's behavior closely and revoke permissions if any suspicious activity occurs. Look for alternative auto-refresh extensions with better security practices and larger user bases. If you must use this extension, ensure your Power BI account uses strong authentication and regularly review your browser's security settings.
Findings
Security Analysis Details
Required Permissions:
- scripting
- storage
- tabs
Host Permissions:
- https://app.powerbi.com/*
Embedded URLs (2 total):
| https://clients2.google.com/service/update2/crx | https://app.powerbi.com/ |
Raw Manifest
{ "name": "Power BI Visuals Auto-Refresh", "icons": { "16": "icon16.png", "48": "icon48.png", "128": "icon128.png" }, "action": { "default_popup": "popup.html" }, "version": "1.0", "background": { "service_worker": "background.js" }, "update_url": "https://clients2.google.com/service/update2/crx", "description": "Automatically refreshes PowerBI visuals at user-defined intervals without manual intervention-Developed by Vahid Doustimajd.", "permissions": [ "scripting", "storage", "tabs" ], "host_permissions": [ "https://app.powerbi.com/*" ], "manifest_version": 3 }
ⓘ CRXaminer has partnered with our friends at Secure Annex to provide additional findings unique to their platform.
Secure Annex also analyzes extensions from other browsers, IDEs, and can continuously monitor.
This extension may not yet be analyzed by Secure Annex.