Extension Details
Rating:
2.6 ★
(38 ratings)
Users:
1,000
Context-Aware Verdict
This section provides a Claude-based AI analysis that applies additional context to the risk. Results are not guaranteed to be accurate.
MEDIUM
Overall Risk
Trust Factors: The extension has concerning trust indicators with only 1,000 users and a poor rating of 2.6 out of 5 stars from 38 reviews, suggesting user dissatisfaction. The lack of author information and developer details raises transparency concerns. The basic functionality of word counting should be straightforward, but the low user satisfaction suggests potential issues with execution or reliability.
Concerns: The activeTab permission is reasonable for a word counting tool that needs to analyze text on web pages, but the storage permission raises questions about what data is being stored and why. The content script specifically targeting Google Docs suggests focused functionality, but combined with storage capabilities, this could potentially collect and retain document content. The use of Manifest V2 indicates the extension hasn't been updated to meet newer security standards. The poor user rating and low adoption suggest either functionality problems or potentially unwanted behavior.
Recommendations: Given the medium risk level and poor user feedback, consider using well-established word counting alternatives with better ratings and more transparent developers. If you choose to use this extension, run it in a separate Chrome profile to isolate any potential risks. Monitor what data might be stored locally and consider the sensitivity of documents you're analyzing. The combination of poor ratings and data storage capabilities suggests this extension may not perform as expected or could have privacy implications.
Findings
This section provides a detailed analysis of the extension's security posture, without broader context. Assumes worst-case impact.
MEDIUM
Medium-Risk Permission: activeTab
This extension has the activeTab permission. Can access the active tab when clicking the extension icon.
MEDIUM
Medium-Risk Permission: storage
This extension has the storage permission. Can store data locally.
MEDIUM
Older Manifest Version
This extension uses Manifest Version 2, which has fewer security restrictions than Manifest V3. Consider using extensions that have upgraded to V3.
Security Analysis Details
Required Permissions:
- activeTab
- storage
Embedded URLs (2 total):
| https://clients2.google.com/service/update2/crx | https://docs.google.com/ |
Raw Manifest
{ "name": "Wordcounter", "icons": { "128": "icon.png" }, "version": "1.3", "background": { "scripts": [ "background.js" ], "persistent": false }, "update_url": "https://clients2.google.com/service/update2/crx", "description": "Displays a real-time word count while writing in Google Docs, as well as milestone markers every 500 words.", "permissions": [ "activeTab", "storage" ], "browser_action": { "name": "Click to toggle Wordcounter on or off" }, "content_scripts": [ { "js": [ "jquery-3.3.1.min.js", "content.js" ], "css": [ "style.css" ], "matches": [ "https://docs.google.com/*" ] } ], "manifest_version": 2 }
ⓘ CRXaminer has partnered with our friends at Secure Annex to provide additional findings unique to their platform.
Secure Annex also analyzes extensions from other browsers, IDEs, and can continuously monitor.
Loading Secure Annex data...
Unable to load Secure Annex data.
This extension may not yet be analyzed by Secure Annex.
Detections
0Critical
0
High
0
Medium
0
Low
0
Has Verdicts
Yes
Manifest Findings
0Critical
0
High
0
Medium
0
Low
0
Secure Annex analyzed version: -