[ new scan ] [ statistics ] [ github ] [ twitter ] [ help ]

Ellie: Your Professional AI Email Assistant

Version 2.5.0 View in Chrome Web Store

Last scanned: about 6 hours ago

Extension Details

Developer: tryellie.com

Rating: 4.0 ★ (23 ratings)

Users: 5,000

Context-Aware Verdict

MEDIUM

Overall Risk

Trust Factors: The extension has a reasonable user base of 5,000 downloads with a solid 4.0-star rating from 23 reviews, indicating generally positive user experiences. The developer domain "tryellie.com" appears legitimate for an AI email assistant service. The extension uses Manifest V3, which provides better security standards than older versions.

Concerns: The extension requests access to multiple major email platforms (Gmail, Outlook, FastMail) through content scripts, which is appropriate for its stated purpose but creates a broad attack surface. The storage permission allows local data retention, which could potentially store sensitive email content or user information. While the activeTab permission is relatively safe, combined with email access it could capture sensitive correspondence. The extension lacks detailed developer information and transparency about data handling practices.

Recommendations: Given the medium risk level, consider running this extension in a separate Chrome profile dedicated to email tasks to isolate potential security impacts. Before installation, review the developer's privacy policy at tryellie.com to understand how your email data is processed and stored. Monitor the extension's behavior initially to ensure it only activates on intended email platforms. Consider whether the AI assistance features justify the broad email access permissions. Regularly review and revoke access if the extension's behavior seems suspicious or if you no longer actively use its features.

Findings

MEDIUM

Medium-Risk Permission: activeTab

This extension has the activeTab permission. Can access the active tab when clicking the extension icon.

MEDIUM

Medium-Risk Permission: storage

This extension has the storage permission. Can store data locally.

Security Analysis Details

Required Permissions:

scripting
storage
activeTab

Embedded URLs (34 total):

https://clients2.google.com/service/update2/crx	https://app.fastmail.com/mail/
https://mail.google.com/mail/	https://outlook.live.com/mail/
https://outlook.office.com/mail/	https://outlook.office365.com/mail/
https://mail.google.com/	https://tryellie.com/upgrade?
https://addons.mozilla.org/en-US/firefox/addon/ellie-your-ai-email-assistant/reviews/	https://chromewebstore.google.com/detail/ellie-your-ai-email-assis/mhcnlcilgicfodlpjcacgglchmpoojcp/reviews
https://airtable.com/appsMy7E6et2CvJB7/shrJ2k7IDtv2FgOSa	https://tryellie.com/downloads
https://tryellie.com/upgrade	https://help.tryellie.com
http://www.w3.org/2000/svg	https://github.com/squarecat/ellie/issues
https://github.com/squarecat/ellie/releases	https://ellie-cdn.b-cdn.net/ellie-email-training-annotated.png
https://openai.com/	https://twitter.com/JamesIvings
https://twitter.com/dinkydani21	https://tryellie.com/forgot
https://example.com	https://example.com/terms
https://example.com/app/	https://tryellie.com/?invite=
https://tryellie.com/assets/fonts/GothamRoundedLight_21020.ttf	https://tryellie.com/assets/fonts/GothamRoundedMedium_21022.ttf
http://meyerweb.com/eric/tools/css/reset/	https://help.tryellie.com/getting-started/dc945YcaCg6LHS6Efo79Af/installation--setup/51bHGPabADwrFtZ4obkJ21
https://ellie-cdn.b-cdn.net/ellie-email-training.mp4	https://help.tryellie.com/getting-started/dc945YcaCg6LHS6Efo79Af/launching-%E2%80%9Cellie-anywhere%E2%80%9D/eSgo96ojLEyRMfVwrrREFT
https://tryellie.com/upgrade?ref=popup	https://api.tryellie.com

Raw Manifest

{
  "name": "Ellie: Your Professional AI Email Assistant",
  "icons": {
    "16": "icons/icon16.png",
    "32": "icons/icon32.png",
    "48": "icons/icon48.png",
    "128": "icons/icon128.png"
  },
  "action": {
    "default_popup": "src/popup/popup.html"
  },
  "version": "2.5.0",
  "background": {
    "type": "module",
    "service_worker": "src/background.js"
  },
  "options_ui": {
    "page": "src/options/index.html",
    "open_in_tab": true,
    "browser_style": true
  },
  "update_url": "https://clients2.google.com/service/update2/crx",
  "description": "Ellie uses the context of the email thread to reply to emails in your style. Works natively in Gmail. Powered by OpenAI & ChatGPT.",
  "permissions": [
    "scripting",
    "storage",
    "activeTab"
  ],
  "content_scripts": [
    {
      "js": [
        "src/clients/common/index.js"
      ],
      "css": [
        "src/clients/common/common.css"
      ],
      "run_at": "document_start",
      "matches": [
        "https://app.fastmail.com/mail/*",
        "https://mail.google.com/mail/*",
        "https://outlook.live.com/mail/*",
        "https://outlook.office.com/mail/*",
        "https://outlook.office365.com/mail/*"
      ]
    },
    {
      "js": [
        "src/clients/gmail/libs/jquery-3.6.1.min.js",
        "src/clients/gmail/libs/gmail.js",
        "src/clients/gmail/libs/postal.js"
      ],
      "css": [
        "src/clients/gmail/styles.css"
      ],
      "run_at": "document_start",
      "matches": [
        "https://mail.google.com/*"
      ]
    },
    {
      "js": [
        "src/clients/gmail/index.js"
      ],
      "css": [
        "src/clients/gmail/styles.css"
      ],
      "run_at": "document_end",
      "matches": [
        "https://mail.google.com/mail/*"
      ]
    },
    {
      "js": [
        "src/clients/outlook/index.js",
        "src/clients/outlook/network-interceptor.js"
      ],
      "css": [
        "src/clients/outlook/styles.css"
      ],
      "run_at": "document_end",
      "matches": [
        "https://outlook.live.com/mail/*",
        "https://outlook.office.com/mail/*",
        "https://outlook.office365.com/mail/*"
      ]
    },
    {
      "js": [
        "src/clients/fastmail/index.js"
      ],
      "css": [
        "src/clients/fastmail/styles.css"
      ],
      "run_at": "document_end",
      "matches": [
        "https://app.fastmail.com/mail/*"
      ]
    }
  ],
  "manifest_version": 3
}

by ✦ Astarte

Ellie: Your Professional AI Email Assistant

Extension Details

Context-Aware Verdict

Findings

Security Analysis Details

Required Permissions:

Embedded URLs (34 total):

Raw Manifest

Detections

Manifest Findings