[ new scan ] [ statistics ] [ github ] [ twitter ] [ help ]

html.to.design

Version 0.0.205 View in Chrome Web Store

Last scanned: about 7 hours ago

Extension Details

Rating: 4.6 ★ (137 ratings)

Users: 700,000

Context-Aware Verdict

CRITICAL

Overall Risk

Based on 6 total findings, including 4 high-risk findings.

Findings

HIGH

High-Risk Permission: debugger

This extension has the debugger permission. Can debug and manipulate other extensions/apps. This could potentially be used maliciously to compromise security or privacy.

HIGH

High-Risk Permission: downloads

This extension has the downloads permission. Can download files and access download history. This could potentially be used maliciously to compromise security or privacy.

HIGH

High-Risk Permission: identity

This extension has the identity permission. Can access your identity information. This could potentially be used maliciously to compromise security or privacy.

HIGH

High-Risk Permission: webNavigation

This extension has the webNavigation permission. Can track your web navigation. This could potentially be used maliciously to compromise security or privacy.

MEDIUM

Medium-Risk Permission: activeTab

This extension has the activeTab permission. Can access the active tab when clicking the extension icon.

MEDIUM

Medium-Risk Permission: storage

This extension has the storage permission. Can store data locally.

Security Analysis Details

Required Permissions:

activeTab
scripting
debugger
downloads
identity
storage
webNavigation

Embedded URLs (40 total):

https://clients2.google.com/service/update2/crx	http://www.w3.org/2000/svg
http://www.w3.org/1998/Math/MathML	http://www.w3.org/1999/xhtml
https://api.divriots.com	https://api-eu.divriots.com
https://api-oddhqn4pmq-uc.a.run.app	https://apieu-oddhqn4pmq-ew.a.run.app
https://developer.mozilla.org/docs/Mozilla/Add-ons/WebExtensions/API/runtime/onMessage	https://feross.org/opensource
https://feross.org	http://www.apache.org/licenses/LICENSE-2.0
https://apis.google.com/js/api.js	https://www.google.com/recaptcha/api.js
https://www.google.com/recaptcha/enterprise.js?render=	https://us-central1-dev-shared-services.cloudfunctions.net/api
https://dev-divriots-f6c83.web.app	https://divriots.com
https://h.to.design	https://hc.to.design
https://h2d.divriots.com	https://us-central1-dev-storytodesign.cloudfunctions.net/api2
https://us-central1-dev-storytodesign.cloudfunctions.net/apiConcurrent	https://cdn.divriots.com/h2d/makefile-v1.mp4
http://www.w3.org/1999/xlink	https://fonts.googleapis.com/css?family=Inter:400
https://divriots.com/one	https://html.to.design
https://html.to.design/docs/pro-for-teams	https://divRIOTS.com/?ref=
https://tally.so/r/wQoPQp?p=h2d&from=chrome-extension	https://www.figma.com/community/plugin/
https://billing.stripe.com/p/login/bIYg2Q6Gle3k3Ha6oo	https://html.to.design/dashboard/
https://html.to.design/docs/cancel-subscription	https://html.to.design/assets/previews.config.json
https://bugs.chromium.org/p/chromium/issues/detail?id=1181370	https://divriots.com/?ref=banner-h2dx
https://github.com/jriecken/sat-js	https://www.figma.com/oauth?client_id=

Raw Manifest

{
  "name": "html.to.design",
  "icons": {
    "16": "icons/16.png",
    "19": "icons/19.png",
    "32": "icons/32.png",
    "38": "icons/38.png",
    "48": "icons/48.png",
    "64": "icons/64.png",
    "96": "icons/96.png",
    "128": "icons/128.png"
  },
  "action": {
    "default_icon": {
      "16": "icons/16.png",
      "19": "icons/19.png",
      "32": "icons/32.png",
      "38": "icons/38.png"
    },
    "default_popup": "src/entries/popup/index.html"
  },
  "version": "0.0.205",
  "commands": {
    "capture-full": {
      "description": "Capture full page.",
      "suggested_key": {
        "default": "Shift+Alt+E"
      }
    },
    "capture-selection": {
      "description": "Capture selection.",
      "suggested_key": {
        "default": "Shift+Alt+D"
      }
    }
  },
  "background": {
    "type": "module",
    "service_worker": "serviceWorker.js"
  },
  "update_url": "https://clients2.google.com/service/update2/crx",
  "description": "Convert any website into fully editable Figma designs. Requires the associated Figma plugin!",
  "permissions": [
    "activeTab",
    "scripting",
    "debugger",
    "downloads",
    "identity",
    "storage",
    "webNavigation"
  ],
  "host_permissions": [],
  "manifest_version": 3,
  "optional_host_permissions": [
    "*://*/*"
  ]
}

by ✦ Astarte

html.to.design

Extension Details

Context-Aware Verdict

Findings

Security Analysis Details

Required Permissions:

Embedded URLs (40 total):

Raw Manifest

Detections

Manifest Findings