[ new scan ] [ statistics ] [ github ] [ twitter ] [ help ]

FACEIT to Leetify Demo Uploader by CSNADES.gg

Version 0.6.2 View in Chrome Web Store

Last scanned: about 10 hours ago

Extension Details

Developer: csnades.gg

Rating: 4.1 ★ (33 ratings)

Users: 30,000

Context-Aware Verdict

LOW

Overall Risk

Trust Factors:

The extension has a solid user base of 30,000 users with a decent 4.1-star rating from 33 reviews, indicating reasonable user satisfaction. The developer csnades.gg appears to be focused on Counter-Strike gaming tools, which aligns with the extension's purpose of uploading FACEIT demos to Leetify for analysis. The manifest version 3 compliance shows the extension follows modern security standards.

Concerns:

The extension's permissions are appropriately minimal for its stated function. The storage permission is justified for temporarily holding demo data during the upload process. The content scripts are properly scoped to only the necessary domains (FACEIT and Leetify platforms). However, the relatively small number of ratings (33) compared to the user base suggests either recent growth or limited user engagement with reviews.

Recommendations:

This extension presents minimal security risk for users interested in CS:GO/CS2 demo analysis. The permissions are well-justified and the scope is limited to gaming platforms. Users can safely install this extension in their main Chrome profile. However, as with any extension that handles game data, users should ensure they're comfortable with demo files being processed through third-party services. Regular monitoring of the extension's behavior and keeping it updated is recommended for continued safe usage.

Findings

MEDIUM

Medium-Risk Permission: storage

This extension has the storage permission. Can store data locally.

Security Analysis Details

Required Permissions:

offscreen
storage

Embedded URLs (24 total):

https://csnades.gg	https://www.faceit.com
https://leetify.com/app	http://www.w3.org/2000/svg
https://clients2.google.com/service/update2/crx	https://faceit.com/
https://www.faceit.com/	https://leetify.com/gcpd-extension-auth
https://leetify.com/app/	https://leetify.com/
https://react.dev/errors/	http://www.w3.org/1998/Math/MathML
http://www.w3.org/1999/xlink	http://www.w3.org/XML/1998/namespace
https://leetify.com/app/match-details/	https://www.faceit.com/api/match/v2/match/
https://www.faceit.com/api/download/v2/demos/download-url	https://leetify.com/auth/login
https://leetify.com	https://api.leetify.com/api/games/
https://www.faceit.com/en/cs2/room/	https://faceit.com
https://api.leetify.com/api/faceit-demos/submit-demo-download-url	https://tailwindcss.com

Raw Manifest

{
  "name": "FACEIT to Leetify Demo Uploader by CSNADES.gg",
  "icons": {
    "48": "icon.48.png",
    "128": "icon.128.png"
  },
  "action": {
    "default_popup": "public/popup.html"
  },
  "version": "0.6.2",
  "background": {
    "type": "module",
    "service_worker": "serviceWorker.js"
  },
  "update_url": "https://clients2.google.com/service/update2/crx",
  "description": "Automatically upload FACEIT match demos to Leetify. Made by CSNADES.gg",
  "permissions": [
    "offscreen",
    "storage"
  ],
  "content_scripts": [
    {
      "js": [
        "/faceit/contentScript.js"
      ],
      "css": [
        "styles.inject.css"
      ],
      "matches": [
        "https://faceit.com/*",
        "https://www.faceit.com/*"
      ]
    },
    {
      "js": [
        "/faceit/web.js"
      ],
      "world": "MAIN",
      "matches": [
        "https://faceit.com/*",
        "https://www.faceit.com/*"
      ]
    },
    {
      "js": [
        "leetify/auth/contentScript.js"
      ],
      "matches": [
        "https://leetify.com/gcpd-extension-auth"
      ],
      "all_frames": true
    },
    {
      "js": [
        "leetify/contentScript.js"
      ],
      "css": [
        "styles.inject.css"
      ],
      "matches": [
        "https://leetify.com/app/*"
      ]
    }
  ],
  "manifest_version": 3,
  "externally_connectable": {
    "ids": [
      "*"
    ],
    "matches": [
      "https://faceit.com/*",
      "https://www.faceit.com/*",
      "https://leetify.com/*"
    ]
  },
  "web_accessible_resources": [
    {
      "matches": [
        "https://faceit.com/*",
        "https://www.faceit.com/*"
      ],
      "resources": [
        "faceit/web.js",
        "styles.inject.css"
      ]
    }
  ]
}

by ✦ Astarte