Supademo: AI interactive demos in seconds

Version 7.2.2 View in Chrome Web Store

Last scanned: 1 day ago | force re-scan

Extension Details

Developer: Supademo, Inc.

Rating: 4.8 ★ (41 ratings)

Users: 40,000

Context-Aware Verdict

HIGH

Overall Risk

Trust Factors: Supademo appears to be a legitimate business tool for creating interactive demos, with a solid 4.8-star rating from 41 reviews and 40,000 users. The company name "Supademo, Inc." suggests an established business entity. The extension's purpose of creating AI-powered interactive demos aligns with its requested permissions for screen capture and web interaction capabilities.

Concerns: The extension requests extremely broad permissions that create significant privacy and security risks. The combination of tabs, webNavigation, and <all_urls> host permissions means it can monitor all your browsing activity across every website you visit. The tabCapture permission allows it to record screen content, which could potentially capture sensitive information like passwords or personal data. The system.display permission provides access to display information, and the scripting permission allows code injection into web pages. While these permissions may be necessary for demo creation functionality, they create a powerful surveillance capability that extends far beyond what most users would expect.

Recommendations: Consider running this extension in a separate Chrome profile dedicated to demo creation work to isolate it from your personal browsing. Only enable the extension when actively creating demos, and disable it during regular browsing. Review what data the extension collects in their privacy policy. If you must use it in your main profile, regularly audit your browsing activity and consider using incognito mode for sensitive tasks when the extension is active.

Findings

HIGH

Broad Host Permissions

This extension has broad host permissions allowing it to access many or all websites. This could potentially be used to steal sensitive data or track browsing activity.

HIGH

High-Risk Permission: tabs

This extension has the tabs permission. Can access browser tab information and manipulate tabs. This could potentially be used maliciously to compromise security or privacy.

HIGH

High-Risk Permission: webNavigation

This extension has the webNavigation permission. Can track your web navigation. This could potentially be used maliciously to compromise security or privacy.

MEDIUM

Medium-Risk Permission: activeTab

This extension has the activeTab permission. Can access the active tab when clicking the extension icon.

MEDIUM

Medium-Risk Permission: storage

This extension has the storage permission. Can store data locally.

Security Analysis Details

Required Permissions:

system.display
windows
tabs
activeTab
tabCapture
offscreen
storage
webNavigation
scripting

Host Permissions:

<all_urls>

Embedded URLs (45 total):

https://media.supademo.com	https://ca.media.supademo.com
https://eu.media.supademo.com	https://chrome.google.com/webstore
https://github.com/csstree/csstree/issues	https://app.supademo.com
https://supademo.com/feedback	https://clients2.google.com/service/update2/crx
https://supademo.com/	https://app.supademo.com/
https://supademo.github.io/	https://tailwindcss.com
http://www.w3.org/2000/svg	https://html.spec.whatwg.org/multipage/custom-elements.html#valid-custom-element-name
https://vuejs.org/error-reference/#runtime-	http://www.w3.org/1998/Math/MathML
http://www.w3.org/1999/xlink	https://github.com/wxt-dev/wxt/issues/371
https://wxt.dev/guide/go-further/testing.html	https://api.supademo.com/
https://8c9f75331c9f870e6acb70f659a6f9e4@o4506441840066560.ingest.us.sentry.io/4509017026199552	https://s1270069.eu-nbg-2.betterstackdata.com
https://docs.supademo.com/create/by-supademo-type/screenshot-video-interactive-demos	https://supademo.com/showcase#customer-success
https://app.supademo.com/upgrade?from=chromeextension	https://docs.supademo.com/create/by-supademo-type/html-interactive-demos
https://supademo.com/showcase#html-demos	https://docs.supademo.com/getting-started/growth-plan
https://supademo.com/showcase#sandbox-demos	https://www.youtube.com/embed/4h-hfxmo0FA
https://evilmartians.com/chronicles/postcss-8-plugin-migration	https://www.w3ctech.com/topic/2226
http://www.w3.org/1999/xhtml	https://docs.supademo.com
https://planetexl.exlservice.com/	https://fa-ewjt-saasfaprod1.fa.ocs.oraclecloud.com/
https://erpprdapp.corp.exlservice.com:4443/	https://www.allsechro.com/EXLPayroll/
https://iexcel.exlservice.com/	https://connect2it.corp.exlservice.com/
https://mytechhub.exlservice.com/	https://portal.azure.com/
https://outlook.office365.com/	https://exlservice-my.sharepoint.com/
https://teams.microsoft.com/

Raw Manifest

{
  "key": "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5pNOvN50wxX3xMx6+uGsootiED+8oqrwod2ocGtWH8iWfoOvBHJYFDX8mADl2aJQHC860jeqzz2UuIWgH9yCkwoBH299LX2BOAHzT3hnaKGeDBCVbb/sfFeYsn3FsA3N4FDvrEhj997InsbrlTV0ZyKPkva014JXREL1huylJa/d5O/aUNczb7nlA74TtUar0BuaXNXw1wreoeu2albcJ0v8shExLCycup1jMYS7hyps8/j25GzKgL/lFcjDJVbvRegOFtG122pNq2gO477SAXYWZ+T9hXNLG6Feao+K+m9+JKIQNa9ialslrpo4OZZbQeER8OApifEKzmncvG4OQIDAQAB",
  "name": "Supademo: AI interactive demos in seconds",
  "icons": {
    "16": "icons/supademo_icon_16.png",
    "32": "icons/supademo_icon_32.png",
    "48": "icons/supademo_icon_48.png",
    "128": "icons/supademo_icon_128.png"
  },
  "action": {
    "default_popup": "popup.html",
    "default_title": "Supademo"
  },
  "version": "7.2.2",
  "commands": {
    "toggle-pause": {
      "description": "Pause/Resume recording",
      "suggested_key": {
        "mac": "Command+Shift+1",
        "default": "Ctrl+Shift+1"
      }
    },
    "manual-capture": {
      "description": "Manual capture in recording mode",
      "suggested_key": {
        "mac": "Command+Shift+2",
        "default": "Ctrl+Shift+2"
      }
    },
    "toggle-shot-mode": {
      "description": "Start/Stop taking a screenshot",
      "suggested_key": {
        "mac": "Command+Shift+9",
        "default": "Ctrl+Shift+9"
      }
    },
    "toggle-supademo-mode": {
      "description": "Start/Stop recording a Supademo",
      "suggested_key": {
        "mac": "Command+Shift+8",
        "default": "Ctrl+Shift+8"
      }
    }
  },
  "background": {
    "type": "module",
    "service_worker": "background.js"
  },
  "short_name": "Supademo",
  "update_url": "https://clients2.google.com/service/update2/crx",
  "description": "Communicate products more effectively using beautiful, AI-powered interactive demos and guides.",
  "permissions": [
    "system.display",
    "windows",
    "tabs",
    "activeTab",
    "tabCapture",
    "offscreen",
    "storage",
    "webNavigation",
    "scripting"
  ],
  "content_scripts": [],
  "host_permissions": [
    "<all_urls>"
  ],
  "manifest_version": 3,
  "externally_connectable": {
    "matches": [
      "https://supademo.com/*",
      "https://app.supademo.com/*",
      "http://localhost:8080/*",
      "https://supademo.github.io/*"
    ]
  },
  "web_accessible_resources": [
    {
      "matches": [
        "<all_urls>"
      ],
      "resources": [
        "fonts/Inter-Bold.woff2",
        "fonts/Inter-Medium.woff2",
        "fonts/Inter-SemiBold.woff2",
        "fonts/Inter-Variable.woff2",
        "fonts/Recoleta-Bold.woff2",
        "fonts/Recoleta-Medium.woff2"
      ]
    },
    {
      "matches": [
        "<all_urls>"
      ],
      "resources": [
        "content-scripts/content.css"
      ]
    },
    {
      "matches": [
        "<all_urls>"
      ],
      "resources": [
        "content-scripts/shadow-ui.css"
      ]
    }
  ]
}

by ✦ Astarte

Supademo: AI interactive demos in seconds

Extension Details

Context-Aware Verdict

Findings

Security Analysis Details

Required Permissions:

Host Permissions:

Embedded URLs (45 total):

Raw Manifest

Detections

Manifest Findings