Extension Details
Developer:
https://gameograf.com/
Rating:
5.0 ★
(1 rating)
Users:
1,000
Context-Aware Verdict
This section provides a Claude-based AI analysis that applies additional context to the risk. Results are not guaranteed to be accurate.
MEDIUM
Overall Risk
Trust Factors: The extension has very limited adoption with only 1,000 users and a single 5-star rating, which provides insufficient data to establish credibility. The developer website gameograf.com appears to be gaming-related, which aligns with the wallpaper theme. However, the lack of comprehensive developer information and minimal user feedback raises questions about the extension's legitimacy and ongoing support.
Concerns: The primary concern is the broad host permissions to api.gameograf.com, which allows the extension to access and potentially collect data from this domain. While the "search" permission seems minimal for a wallpaper extension, the combination with host permissions creates potential privacy risks. The extension's actual functionality may not require such network access, making these permissions potentially excessive. The extremely low user base and single rating also suggest limited community vetting.
Recommendations: Consider running this extension in a separate Chrome profile to isolate potential risks from your main browsing data. Before installation, verify that gameograf.com is a legitimate website and review their privacy policy. Monitor the extension's network activity if possible, and be cautious about any unexpected behavior. Given the limited user base and broad permissions, you might want to seek alternative wallpaper extensions with better-established reputations and more transparent permission usage.
Findings
This section provides a detailed analysis of the extension's security posture, without broader context. Assumes worst-case impact.
HIGH
Broad Host Permissions
This extension has broad host permissions allowing it to access many or all websites. This could potentially be used to steal sensitive data or track browsing activity.
Security Analysis Details
Required Permissions:
- search
Host Permissions:
- https://api.gameograf.com/*
Embedded URLs (14 total):
| https://fonts.googleapis.com | https://fonts.gstatic.com | |
| https://fonts.googleapis.com/css2?family=Poppins:ital | https://fonts.googleapis.com/css2?family=Material+Symbols+Outlined:opsz | |
| https://clients2.google.com/service/update2/crx | https://api.gameograf.com/ | |
| https://chrome.google.com/webstore/detail/ | https://gameograf.com/top-100/ | |
| https://gameograf.com/privacy-policy | https://api.gameograf.com/popup/message.json | |
| https://gameograf.com/?utm_source=install&utm_medium=link&utm_campaign=bg&utm_content=install | https://gameograf.com/?utm_source=gameograf&utm_medium=link&utm_campaign=bg&utm_content=uninstall | |
| https://api.gameograf.com/js/shortcuts.json | https://www.google.com/s2/favicons?domain= |
Raw Manifest
{ "name": "__MSG_appName__", "icons": { "16": "img/128.png", "48": "img/128.png", "128": "img/128.png" }, "author": "Gameograf", "version": "2.2.0", "background": { "service_worker": "js/bg.js" }, "update_url": "https://clients2.google.com/service/update2/crx", "description": "__MSG_appDesc__", "permissions": [ "search" ], "default_locale": "en", "host_permissions": [ "https://api.gameograf.com/*" ], "manifest_version": 3, "chrome_url_overrides": { "newtab": "newtab.html" } }
ⓘ CRXaminer has partnered with our friends at Secure Annex to provide additional findings unique to their platform.
Secure Annex also analyzes extensions from other browsers, IDEs, and can continuously monitor.
Loading Secure Annex data...
Unable to load Secure Annex data.
This extension may not yet be analyzed by Secure Annex.
Detections
0Critical
0
High
0
Medium
0
Low
0
Has Verdicts
Yes
Manifest Findings
0Critical
0
High
0
Medium
0
Low
0
Secure Annex analyzed version: -