[ new scan ] [ statistics ] [ github ] [ twitter ] [ help ]

Color Grabber

Version 1.0.8 View in Chrome Web Store

Last scanned: about 18 hours ago

Extension Details

Developer: colorgrabber.io

Rating: 5.0 ★ (1 rating)

Users: 208

Context-Aware Verdict

MEDIUM

Overall Risk

Trust Factors: The extension has very limited adoption with only 208 users and a single 5-star rating, making it difficult to assess reliability through community feedback. The developer domain "colorgrabber.io" suggests a specialized tool for color-related functionality, which aligns with the extension name. However, the lack of detailed developer information and minimal user base raises some trust concerns.

Concerns: The primary concern is the extremely low user adoption combined with limited rating data, making it difficult to verify the extension's legitimacy and safety through community validation. The activeTab permission, while reasonable for a color grabbing tool that needs to analyze webpage colors, still provides access to sensitive page content. The use of Manifest V2 indicates the extension hasn't been updated to meet newer security standards. The storage permission allows data persistence, which could potentially be misused if the extension is malicious.

Recommendations: Given the low user count and limited validation, consider running this extension in a separate Chrome profile to isolate potential risks. Before installation, verify the developer's website (colorgrabber.io) exists and appears legitimate. Monitor the extension's behavior after installation and remove it if you notice any unexpected activity. Consider looking for alternative color grabbing tools with larger user bases and more established reputations. If you must use this extension, limit its usage to non-sensitive websites.

Findings

MEDIUM

Medium-Risk Permission: activeTab

This extension has the activeTab permission. Can access the active tab when clicking the extension icon.

MEDIUM

Medium-Risk Permission: storage

This extension has the storage permission. Can store data locally.

MEDIUM

Older Manifest Version

This extension uses Manifest Version 2, which has fewer security restrictions than Manifest V3. Consider using extensions that have upgraded to V3.

Security Analysis Details

Required Permissions:

activeTab
storage

Embedded URLs (23 total):

https://github.com/R-TEK/colr_pickr	https://fonts.gstatic.com
https://fonts.googleapis.com/css2?family=Poppins:wght@400	http://www.w3.org/2000/svg
http://kushagragour.in/lab/hint/	https://github.com/chinchang/hint.css
http://getbootstrap.com	https://github.com/twbs/bootstrap/blob/master/LICENSE
https://github.com/h5bp/html5-boilerplate/blob/master/src/css/main.css	http://latitudu.com
http://tachyons.io	https://app.kyubi.io/api/end-user/login
https://app.kyubi.io/api/end-user/generate-password-token	https://app.kyubi.io/api/end-user/update-password
https://app.kyubi.io/api/end-user/get-status	https://www.tier5.us/
https://partner.tier5.us/?utm_source=ColorGrabber	https://www.messenger.com/t/tier5development
https://www.facebook.com/tier5development	https://app.kyubi.io/api/clear-subscription-object
https://chrome.google.com/webstore	https://eyedropper.test/help/file-urls
https://clients2.google.com/service/update2/crx

Raw Manifest

{
  "name": "Color Grabber",
  "icons": {
    "16": "images/1625151100122-smallLogo.png",
    "48": "images/1625151100166-mediumLogo.png",
    "128": "images/1625151100210-largeLogo.png"
  },
  "version": "1.0.8",
  "commands": {
    "activate": {
      "description": "Activate pick color from web page",
      "suggested_key": {
        "default": "Alt+P"
      }
    }
  },
  "background": {
    "page": "background.html",
    "persistent": true
  },
  "short_name": "CG",
  "update_url": "https://clients2.google.com/service/update2/crx",
  "description": "Extract colors easily from anywhere with color grabber tool.",
  "permissions": [
    "activeTab",
    "storage"
  ],
  "browser_action": {
    "default_popup": "login.html",
    "default_title": "Color Grabber"
  },
  "manifest_version": 2,
  "web_accessible_resources": [
    "js/edropper2.js",
    "inject/anchor-cursor-default.css",
    "inject/anchor-cursor-crosshair.css",
    "inject/edropper2.css"
  ]
}

by ✦ Astarte

Color Grabber

Extension Details

Context-Aware Verdict

Findings

Security Analysis Details

Required Permissions:

Embedded URLs (23 total):

Raw Manifest

Detections

Manifest Findings