CRX aminer
Extension icon

Tiered Level Notification Companion

Version 1.0.8 View in Chrome Web Store

Last scanned: about 11 hours ago

Extension Details

Rating: 0.0 ★

Context-Aware Verdict

HIGH
Overall Risk
Trust Factors:

The extension has several concerning trust indicators. With 0 downloads, no user ratings, and missing author/developer information, there's no established reputation or user base to validate its legitimacy. The lack of transparency about the developer raises immediate red flags about accountability and trustworthiness.

Concerns:

The extension's permissions are excessive for what appears to be a PowerBI notification tool. While it legitimately needs access to PowerBI domains, the broad host permissions allowing access to all HTTP/HTTPS websites is unnecessary and dangerous. The tabs permission enables monitoring and manipulation of all browser tabs, far beyond what a notification companion should require. The combination of these permissions creates a powerful surveillance and data collection capability that could be exploited maliciously.

The technical profile shows content scripts only targeting PowerBI, which contradicts the overly broad host permissions. This mismatch suggests either poor development practices or intentional overreach.

Recommendations:

Do not install this extension due to the combination of excessive permissions, lack of developer transparency, and zero user validation. If PowerBI notifications are needed, seek established alternatives with proper developer information and user reviews. If you must test this extension, create a completely isolated Chrome profile with no sensitive data or important accounts logged in.

Findings

HIGH
Broad Host Permissions
This extension has broad host permissions allowing it to access many or all websites. This could potentially be used to steal sensitive data or track browsing activity.
HIGH
High-Risk Permission: tabs
This extension has the tabs permission. Can access browser tab information and manipulate tabs. This could potentially be used maliciously to compromise security or privacy.
MEDIUM
Medium-Risk Permission: activeTab
This extension has the activeTab permission. Can access the active tab when clicking the extension icon.
MEDIUM
Medium-Risk Permission: storage
This extension has the storage permission. Can store data locally.