Extension Details
Context-Aware Verdict
The extension has a decent rating of 4.4 stars from 20 reviews and serves 2,000 users, indicating some level of user satisfaction. However, the lack of visible developer information and company details reduces transparency and accountability. The extension appears to be specifically designed for CloudResearch Connect's participant dashboard, suggesting a legitimate use case for research participants.
The extension requests storage permissions which could potentially be used to collect and store user data locally, though this may be necessary for dashboard refresh functionality. The activeTab permission allows access to the currently active tab when the extension is clicked, which could expose sensitive information if misused. The content scripts are specifically targeted at CloudResearch Connect URLs, which is appropriate for the stated purpose but still represents code injection capabilities on those pages.
Given the medium risk level, consider running this extension in a separate Chrome profile if you frequently handle sensitive research data or personal information. Before installation, verify that you actually use CloudResearch Connect services, as the extension appears purpose-built for that platform. Monitor the extension's behavior and consider removing it if you notice any unexpected data collection or performance issues. The relatively small user base and limited review count suggest exercising additional caution compared to more established extensions.
Findings
Security Analysis Details
Required Permissions:
- offscreen
- storage
- activeTab
Embedded URLs (4 total):
| https://commondatastorage.googleapis.com/codeskulptor-assets/week7-brrring.m4a | https://clients2.google.com/service/update2/crx | |
| https://connect.cloudresearch.com/participant/dashboard/ | https://connect.cloudresearch.com/participant/dashboard |
Raw Manifest
{ "name": "Connect Dashboard Refresh", "icons": { "16": "images/icon16.png", "40": "images/icon40.png", "80": "images/icon80.png" }, "action": { "default_icon": { "16": "images/icon16.png", "40": "images/icon40.png", "80": "images/icon80.png" }, "default_popup": "popup.html", "default_title": "Connect Dashboard Refresh" }, "author": "Cristen Saline", "version": "3.5", "background": { "service_worker": "background.js" }, "update_url": "https://clients2.google.com/service/update2/crx", "description": "This tool Enhances the connect.cloudresearch.com participant's productivity, With dasbhoard refreshes and new project sound alerts.", "permissions": [ "offscreen", "storage", "activeTab" ], "content_scripts": [ { "js": [ "content.js" ], "matches": [ "https://connect.cloudresearch.com/participant/dashboard/", "https://connect.cloudresearch.com/participant/dashboard" ] } ], "manifest_version": 3, "web_accessible_resources": [ { "matches": [ "<all_urls>" ], "resources": [ "audio/week7-brrring.mp3" ] } ] }
ⓘ CRXaminer has partnered with our friends at Secure Annex to provide additional findings unique to their platform.
Secure Annex also analyzes extensions from other browsers, IDEs, and can continuously monitor.
This extension may not yet be analyzed by Secure Annex.