[ new scan ] [ statistics ] [ github ] [ twitter ] [ help ]

Raindrop.io

Version 6.7.6 View in Chrome Web Store

Last scanned: about 12 hours ago

Extension Details

Developer: http://raindrop.io/

Rating: 4.1 ★ (776 ratings)

Users: 400,000

Context-Aware Verdict

MEDIUM

Overall Risk

Trust Factors: Raindrop.io is a well-established bookmark management service with a solid reputation in the productivity space. The extension has 400,000 users and maintains a decent 4.1-star rating from 776 reviews, indicating reasonable user satisfaction. The developer operates a legitimate website and service, adding credibility to the extension.

Concerns: The extension requests several permissions that, while appropriate for a bookmark manager, still present moderate privacy considerations. The activeTab permission allows access to webpage content when the extension is activated, which could potentially expose sensitive information from visited pages. The contextMenus permission enables the extension to add options to your right-click menu, creating additional interaction points. The storage permission allows local data retention, which means your bookmarking data and potentially browsing patterns could be stored locally.

The scripting permission, while not flagged in the security findings, is also present and allows the extension to inject code into web pages for bookmark functionality.

Recommendations: This extension appears legitimate for its intended purpose of bookmark management. The permissions align with expected functionality for saving and organizing bookmarks. However, if you're particularly privacy-conscious, consider running it in a separate Chrome profile or review the extension's privacy policy to understand data handling practices. Regular users of bookmark management tools will likely find the risk-to-benefit ratio acceptable.

Findings

MEDIUM

Medium-Risk Permission: activeTab

This extension has the activeTab permission. Can access the active tab when clicking the extension icon.

MEDIUM

Medium-Risk Permission: contextMenus

This extension has the contextMenus permission. Can add items to the context menu.

MEDIUM

Medium-Risk Permission: storage

This extension has the storage permission. Can store data locally.

Security Analysis Details

Required Permissions:

contextMenus
activeTab
scripting
storage
sidePanel

Optional Permissions:

tabs

Embedded URLs (101 total):

https://clients2.google.com/service/update2/crx	https://app.raindrop.io
http://www.w3.org/1999/xhtml	https://svelte.dev/e/async_derived_orphan
https://svelte.dev/e/effect_in_teardown	https://svelte.dev/e/effect_in_unowned_derived
https://svelte.dev/e/effect_orphan	https://svelte.dev/e/effect_update_depth_exceeded
https://svelte.dev/e/hydration_failed	https://svelte.dev/e/state_descriptors_fixed
https://svelte.dev/e/state_prototype_fixed	https://svelte.dev/e/state_unsafe_mutation
https://svelte.dev/e/svelte_boundary_reset_onerror	https://svelte.dev/e/hydration_mismatch
https://svelte.dev/e/svelte_boundary_reset_noop	https://svelte.dev/e/
http://www.w3.org/2000/svg	https://raindrop.io/pro/buy
http://www.w3.org/1999/xlink	https://raindrop.io/
https://raindrop.io/collection/	https://www.google.com
https://www.gstatic.com	https://api.raindrop.io/v1/auth/jwt?done_uri=raindrop://settings/pro
https://api.raindrop.io/v1/auth/jwt?done_uri=rniomacsafari://subscribe	https://app.raindrop.io/my/0/
https://app.raindrop.io/settings/import	https://raindrop.io/download
https://blog.raindrop.io	https://raindrop.io
https://help.raindrop.io	https://help.raindrop.io/about
https://help.raindrop.io/troubleshooting/open-multiple-links	https://help.raindrop.io/import
https://help.raindrop.io/using-search#searching-from-the-browser-address-bar	https://help.raindrop.io/install-extension#enabling-saved-page-indicator
https://help.raindrop.io/troubleshooting/login	https://help.raindrop.io/changelog
https://help.raindrop.io/embed	https://help.raindrop.io/public-page
https://help.raindrop.io/collaboration	https://help.raindrop.io/bookmarks
https://help.raindrop.io/bookmarks#managing-a-bookmark	https://help.raindrop.io/using-search
https://help.raindrop.io/authentication#two-factor-authentication-2fa	https://help.raindrop.io/highlights
https://help.raindrop.io/highlights/#	https://help.raindrop.io/export#automatic-daily-backups
https://help.raindrop.io/broken-links#reducing-false-positives	https://help.raindrop.io/stella
https://raindrop.io/pro?frame=1	https://raindrop.io/pro
https://help.raindrop.io/premium-features#faq	https://help.raindrop.io/premium-features#managing-your-subscription
https://help.raindrop.io/premium-features	https://developer.raindrop.io
https://developer.raindrop.io/terms	https://developer.raindrop.io/v1/authentication/token
https://github.com/raindropio	https://rdl.ink
https://api.raindrop.io/v1/	https://preview.systems
https://beta-ai.raindrop.io/ai	https://github.com/zloirock/core-js/blob/v3.31.0/LICENSE
https://github.com/zloirock/core-js	https://github.com/date-fns/date-fns/blob/master/docs/unicodeTokens.md
https://github.com/date-fns/date-fns/blob/master/docs/upgradeGuide.md#string-arguments	http://www.w3.org/1998/Math/MathML
https://mozilla.github.io/localForage/#definedriver	http://fb.me/use-check-prop-types
https://reactjs.org/docs/error-decoder.html?invariant=	http://www.w3.org/XML/1998/namespace
https://github.com/SortableJS/react-sortablejs.	https://redux.js.org/Errors?code=
https://reactjs.org/link/react-polyfills	https://github.com/rtfeldman/seamless-immutable/wiki/Deeply-nested-object-was-detected
https://developer.mozilla.org/docs/Mozilla/Add-ons/WebExtensions/API/runtime/onMessage	https://help.raindrop.io/terms
https://help.raindrop.io/privacy	https://help.raindrop.io/permanent-copy

Page 1 of 2

Raw Manifest

{
  "name": "Raindrop.io",
  "icons": {
    "16": "assets/icon_16.png",
    "32": "assets/icon_32.png",
    "48": "assets/icon_48.png",
    "128": "assets/icon_128.png"
  },
  "action": {
    "default_icon": {
      "16": "assets/action_chrome_16.png",
      "24": "assets/action_chrome_24.png",
      "32": "assets/action_chrome_32.png"
    },
    "default_popup": "index.html?action"
  },
  "author": "Mussabekov Rustem",
  "omnibox": {
    "keyword": "rd"
  },
  "version": "6.7.6",
  "commands": {
    "save_page": {
      "description": "__MSG_savePageOrHighlight__",
      "suggested_key": {
        "default": "Ctrl+Shift+S"
      }
    },
    "_execute_action": {},
    "open_raindrop_web": {
      "description": "__MSG_openRaindrop__"
    },
    "execute_side_panel": {
      "description": "__MSG_openSidePanel__",
      "suggested_key": {
        "default": "Ctrl+Period"
      }
    }
  },
  "background": {
    "service_worker": "background.js"
  },
  "short_name": "Raindrop.io",
  "side_panel": {
    "default_path": "sidepanel.html"
  },
  "update_url": "https://clients2.google.com/service/update2/crx",
  "description": "__MSG_appDesc__",
  "permissions": [
    "contextMenus",
    "activeTab",
    "scripting",
    "storage",
    "sidePanel"
  ],
  "homepage_url": "https://app.raindrop.io",
  "version_name": "5.7.6",
  "default_locale": "en",
  "host_permissions": [],
  "manifest_version": 3,
  "optional_permissions": [
    "tabs"
  ],
  "optional_host_permissions": [
    "*://*/*"
  ]
}

by ✦ Astarte

Raindrop.io

Extension Details

Context-Aware Verdict

Findings

Security Analysis Details

Required Permissions:

Optional Permissions:

Embedded URLs (101 total):

Raw Manifest

Detections

Manifest Findings