Extension Details
Context-Aware Verdict
The extension has a reasonable user base of 8,000 downloads and maintains a solid 4.5-star rating, though based on only 13 reviews which is relatively few. COYWOLF LLC appears to be the developer, but without additional company information, it's difficult to assess their reputation and track record in extension development.
The primary security concerns center around the extension's broad permissions relative to its stated purpose. For an Open Graph checker tool, the combination of tabs permission and universal host permissions (https://*//) creates significant privacy and security risks. The tabs permission allows the extension to access information about all browser tabs and potentially manipulate them, while the broad host permissions grant access to virtually every HTTPS website you visit. This level of access far exceeds what would typically be necessary for checking Open Graph metadata on specific pages.
Given the high-risk permission combination, consider running this extension in a separate Chrome profile dedicated to development or testing activities. Before installation, verify that these broad permissions are truly necessary for the extension's core functionality. Look for alternative Open Graph checking tools that operate with more limited permissions, or consider using web-based Open Graph validators that don't require browser extension installation. If you must use this extension, regularly review your browsing activity and consider disabling it when not actively needed for Open Graph testing.
Findings
Security Analysis Details
Required Permissions:
- tabs
Host Permissions:
- https://*/
Embedded URLs (10 total):
| https://developer.mozilla.org/docs/Mozilla/Add-ons/WebExtensions/API/runtime/onMessage | https://reactjs.org/docs/error-decoder.html?invariant= | |
| http://www.w3.org/1999/xlink | http://www.w3.org/XML/1998/namespace | |
| http://www.w3.org/1999/xhtml | http://www.w3.org/1998/Math/MathML | |
| http://www.w3.org/2000/svg | https://reactjs.org/link/react-polyfills | |
| https://clients2.google.com/service/update2/crx | https://coywolf.pro/social/open-graph-checker/ |
Raw Manifest
{ "name": "Open Graph Checker", "icons": { "16": "icon-white-16.png", "48": "icon-white-48.png", "128": "icon-white-128.png" }, "action": { "default_icon": "icon-white-48.png", "default_popup": "popup.html", "default_title": "Open Graph Checker" }, "version": "0.2", "background": { "service_worker": "service-worker.js" }, "update_url": "https://clients2.google.com/service/update2/crx", "description": "Check and preview the social sharing details from a page's Open Graph metadata", "permissions": [ "tabs" ], "host_permissions": [ "https://*/" ], "manifest_version": 3, "content_security_policy": {}, "web_accessible_resources": [ { "matches": [], "resources": [ "options.bundle.js", "popup.bundle.js" ], "extension_ids": [] } ] }
ⓘ CRXaminer has partnered with our friends at Secure Annex to provide additional findings unique to their platform.
Secure Annex also analyzes extensions from other browsers, IDEs, and can continuously monitor.
This extension may not yet be analyzed by Secure Annex.