Group Tabs By Domain

Version 0.0.1.2 View in Chrome Web Store

Last scanned: about 1 month ago | force re-scan

Extension Details

Rating: 4.3 ★ (66 ratings)

Users: 5,000

Context-Aware Verdict

MEDIUM

Overall Risk

Trust Factors:

The extension has a reasonable user base of 5,000 downloads with a solid 4.3-star rating from 66 reviews, suggesting positive user experiences. The functionality aligns well with its stated purpose of grouping tabs by domain. However, the lack of visible author information and developer details reduces transparency and accountability.

Concerns:

The primary concern is the tabs permission, which grants broad access to browser tab information including URLs, titles, and the ability to manipulate tabs. While this permission is necessary for the extension's core functionality of grouping tabs, it also creates potential privacy risks as the extension can monitor all browsing activity. The storage permission, though lower risk, allows data persistence which could be used to track browsing patterns over time. The extension's very early version number (0.0.1.2) suggests it may still be in active development with potential stability issues.

Recommendations:

Given the medium risk level, consider running this extension in a separate Chrome profile if you handle sensitive information in your main browsing session. Monitor the extension's behavior and review any future permission requests carefully. The legitimate functionality makes the risk acceptable for most users, but those with high privacy requirements should evaluate whether the convenience justifies the broad tab access permissions.

Findings

HIGH

High-Risk Permission: tabs

This extension has the tabs permission. Can access browser tab information and manipulate tabs. This could potentially be used maliciously to compromise security or privacy.

MEDIUM

Medium-Risk Permission: storage

This extension has the storage permission. Can store data locally.

Security Analysis Details

Required Permissions:

tabGroups
tabs
storage

Embedded URLs (18 total):

http://materializecss.com	https://raw.githubusercontent.com/Dogfalo/materialize/master/LICENSE
http://fian.my.id/Waves	https://github.com/fians/Waves/blob/master/LICENSE
https://g.co/ng/security#xss	http://www.w3.org/2000/svg
http://www.w3.org/1999/xhtml	http://www.w3.org/1999/xlink
http://www.w3.org/XML/1998/namespace	http://www.w3.org/2000/xmlns/
http://www.w3.org/1998/MathML/	http://www.apache.org/licenses/
http://www.apache.org/licenses/LICENSE-2.0	https://angular.io/license
https://fonts.gstatic.com	https://fonts.gstatic.com/s/materialicons/v141/flUhRq6tzZclQEJ-Vdg-IuiaDsNcIhQ8tQ.woff2
https://clients2.google.com/service/update2/crx	http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd

Raw Manifest

{
  "name": "Group Tabs By Domain",
  "icons": {
    "16": "images/icon-16.png",
    "32": "images/icon-32.png",
    "48": "images/icon-48.png",
    "128": "images/icon-128.png"
  },
  "action": {
    "default_popup": "popup.html"
  },
  "version": "0.0.1.2",
  "commands": {
    "group-tabs-by-domain": {
      "description": "Streamline browsing. Group tabs by domain effortlessly. Stay organized, boost productivity.",
      "suggested_key": {
        "mac": "Command+Shift+K",
        "default": "Ctrl+Shift+K"
      }
    }
  },
  "background": {
    "service_worker": "serviceWorker.js"
  },
  "update_url": "https://clients2.google.com/service/update2/crx",
  "description": "Streamline browsing. Group tabs by domain effortlessly. Stay organized, boost productivity.",
  "permissions": [
    "tabGroups",
    "tabs",
    "storage"
  ],
  "manifest_version": 3
}

by ✦ Astarte