CRX aminer
Extension icon

Application Launcher For Drive (by Google)

Version 3.10 View in Chrome Web Store

Last scanned: about 4 hours ago

Extension Details

Developer: google.com
Rating: 2.9 ★ (2.2K ratings)
Users: 86,000,000

Context-Aware Verdict

MEDIUM
Overall Risk
Trust Factors:

This extension is developed by Google directly (google.com), which provides significant credibility and trust. With 86 million users, it's clearly a widely adopted tool. However, the relatively low rating of 2.9 out of 5 from over 2,200 reviews suggests user dissatisfaction, which could indicate functionality issues or privacy concerns.

Concerns:

The extension's host permissions are specifically limited to Google's own domains (docs.google.com and drive.google.com), which is appropriate for its function as a Drive application launcher. However, the "broad host permissions" finding appears to be a false positive since the permissions are actually quite targeted. The nativeMessaging permission allows communication with native applications on your computer, which could potentially be misused but is likely necessary for launching applications. The low user rating is concerning and suggests the extension may not be working as expected or users have privacy concerns.

Recommendations:

Given Google's reputation as the developer and the targeted permissions to their own services, this extension appears relatively safe to use. However, the poor user rating warrants caution. Consider reading recent reviews to understand user complaints before installing. If you decide to use it, monitor its behavior and consider running it in a separate Chrome profile if you notice any unexpected activity. The extension appears to serve its stated purpose legitimately within Google's ecosystem.

Findings

HIGH
Broad Host Permissions
This extension has broad host permissions allowing it to access many or all websites. This could potentially be used to steal sensitive data or track browsing activity.
MEDIUM
Access to Sensitive Domains
This extension requests access to sensitive domains: https://docs.google.com/*, https://drive.google.com/*. Ensure you trust this extension with access to these sites.