[ new scan ] [ statistics ] [ github ] [ twitter ] [ help ]

Slack

Version 1.0.3 View in Chrome Web Store

Last scanned: about 10 hours ago

Extension Details

Developer: https://slack.com/

Rating: 2.5 ★ (429 ratings)

Context-Aware Verdict

HIGH

Overall Risk

Based on 5 total findings, including 2 high-risk findings.

Findings

HIGH

High-Risk Permission: clipboardRead

This extension has the clipboardRead permission. Can read clipboard content. This could potentially be used maliciously to compromise security or privacy.

HIGH

High-Risk Permission: clipboardWrite

This extension has the clipboardWrite permission. Can modify clipboard content. This could potentially be used maliciously to compromise security or privacy.

MEDIUM

Medium-Risk Permission: notifications

This extension has the notifications permission. Can show notifications.

MEDIUM

Medium-Risk Permission: unlimitedStorage

This extension has the unlimitedStorage permission. Can store unlimited data locally.

MEDIUM

Older Manifest Version

This extension uses Manifest Version 2, which has fewer security restrictions than Manifest V3. Consider using extensions that have upgraded to V3.

Raw Manifest

{
  "app": {
    "urls": [
      "*://slack.com/",
      "*://*.slack.com/"
    ],
    "launch": {
      "web_url": "https://slack.com/ssb"
    }
  },
  "name": "Slack",
  "icons": {
    "128": "app-96_chrome_app.png"
  },
  "version": "1.0.3",
  "short_name": "Slack",
  "update_url": "https://clients2.google.com/service/update2/crx",
  "description": "Slack is all your team communication in one place, instantly searchable, available wherever you go.",
  "permissions": [
    "unlimitedStorage",
    "notifications",
    "clipboardRead",
    "clipboardWrite"
  ],
  "homepage_url": "https://slack.com",
  "manifest_version": 2
}

by ✦ Astarte

Slack

Extension Details

Context-Aware Verdict

Findings

Security Analysis Details

Required Permissions:

Embedded URLs (3 total):

Raw Manifest

Detections

Manifest Findings

https://clients2.google.com/service/update2/crx	https://slack.com/ssb
https://slack.com