[ new scan ] [ statistics ] [ github ] [ twitter ] [ help ]

Google Gemini Sidepanel - Tabbee

Version 1.2 View in Chrome Web Store

Last scanned: about 4 hours ago

Extension Details

Developer: https://tabbee.site/

Rating: 4.9 ★ (70 ratings)

Users: 2,000

Context-Aware Verdict

MEDIUM

Overall Risk

Trust Factors: The extension has a strong user rating of 4.9 stars from 70 reviews and 2,000 users, indicating positive user experiences. The developer maintains a website (tabbee.site) which adds some legitimacy. The extension uses Manifest V3, showing compliance with modern Chrome extension standards.

Concerns: The combination of storage and unlimitedStorage permissions raises questions about data handling practices, especially since there's no clear description provided about what data is being stored or why unlimited storage is necessary for a Gemini sidepanel integration. The declarativeNetRequest permissions suggest the extension may modify network requests, though this could be legitimate for API interactions with Google's Gemini service. The lack of detailed description makes it difficult to assess whether these permissions align with the extension's stated functionality.

Recommendations: Before installing, visit the developer's website to understand their privacy practices and data handling policies. Consider the extension's actual functionality - if it only provides a sidepanel for Gemini, question why unlimited storage is needed. Monitor the extension's behavior after installation to ensure it's not storing excessive data. If you're concerned about data privacy, consider running this extension in a separate Chrome profile to isolate any potential data collection from your main browsing activities.

Findings

MEDIUM

Medium-Risk Permission: storage

This extension has the storage permission. Can store data locally.

MEDIUM

Medium-Risk Permission: unlimitedStorage

This extension has the unlimitedStorage permission. Can store unlimited data locally.

Security Analysis Details

Required Permissions:

storage
unlimitedStorage
declarativeNetRequest
declarativeNetRequestFeedback
sidePanel

Embedded URLs (63 total):

http://www.w3.org/2000/svg	https://clients2.google.com/service/update2/crx
http://gemini.google.com/	https://gemini.google.com/
https://fonts.googleapis.com/css2?family=Roboto:wght@100	http://fian.my.id/Waves
https://github.com/fians/Waves/blob/master/LICENSE	https://fonts.googleapis.com/css2?family=Roboto:wght@400
https://www.w3.org/TR/WCAG20/#visual-audio-contrast-contrast	https://code.google.com/p/chromium/issues/detail?id=157218
https://getbootstrap.com/	https://github.com/twbs/bootstrap/blob/main/LICENSE
https://github.com/sass/sass/issues/2383#issuecomment-336349172	https://github.com/twbs/rfs/blob/main/LICENSE
https://github.com/twbs/rfs/issues/14	https://github.com/necolas/normalize.css
https://github.com/twbs/bootstrap/issues/19402	https://github.com/twbs/bootstrap/issues/24093
https://github.com/twbs/bootstrap/pull/30562	https://github.com/twbs/bootstrap/issues/24990
https://stackoverflow.com/a/54997118	https://github.com/twbs/bootstrap/issues/12359
https://html.spec.whatwg.org/multipage/#the-fieldset-and-legend-elements	https://github.com/twbs/bootstrap/issues/29712
https://github.com/twbs/bootstrap/issues/18842	https://github.com/twbs/bootstrap/issues/11586.
https://rtlstyling.com/posts/rtl-styling#form-inputs	https://rtlcss.com/learn/usage-guide/control-directives/#raw
https://github.com/twbs/bootstrap/issues/18178	https://www.w3.org/TR/mediaqueries-4/#mq-min-max
https://bugs.webkit.org/show_bug.cgi?id=178261	https://github.com/react-bootstrap/react-bootstrap/issues/6039
https://github.com/philipwalton/flexbugs#flexbug-4	https://github.com/twbs/bootstrap/issues/23307
https://bugs.webkit.org/show_bug.cgi?id=198959	https://github.com/twbs/bootstrap/pull/11526.
https://github.com/twbs/bootstrap/issues/11655.	https://github.com/twbs/bootstrap/pull/29124
https://primer.github.io/.	https://github.com/twbs/bootstrap/issues/32636
https://github.com/twbs/bootstrap/issues/28247	https://stackoverflow.com/questions/36247140/why-dont-flex-items-shrink-past-content-size
https://github.com/sass/sass/issues/1873#issuecomment-152293725	https://github.com/twbs/bootstrap/pull/22740#issuecomment-305868106
https://developer.mozilla.org/en-US/docs/Web/Events/click#Safari_Mobile	https://github.com/twbs/bootstrap/pull/10951.
https://bugs.webkit.org/show_bug.cgi?id=158342	https://github.com/twbs/bootstrap/issues/17695
https://github.com/twbs/bootstrap/issues/24800	https://github.com/sass/node-sass/issues/2251
https://www.a11yproject.com/posts/2013-01-11-how-to-hide-content/	https://kittygiraudel.com/2016/10/13/css-hide-and-seek/
https://github.com/twbs/bootstrap/issues/25686	https://www.w3.org/TR/2013/NOTE-WCAG20-TECHS-20130905/G1
https://fontawesome.com	https://fontawesome.com/license/free
https://tabler.io	https://github.com/tabler/tabler-icons/blob/master/LICENSE
https://github.com/twbs/bootstrap/graphs/contributors	https://popper.js.org/
https://tabbee.site/sidepanelai/	https://chrome.google.com/webstore/detail/
https://tabbee.site/sidepanel_extensions/

Raw Manifest

{
  "name": "__MSG_name__",
  "icons": {
    "16": "assets/images/icon16.png",
    "18": "assets/images/icon18.png",
    "19": "assets/images/icon19.png",
    "32": "assets/images/icon32.png",
    "36": "assets/images/icon36.png",
    "38": "assets/images/icon38.png",
    "48": "assets/images/icon48.png",
    "64": "assets/images/icon64.png",
    "128": "assets/images/icon128.png"
  },
  "action": {
    "default_icon": {
      "16": "assets/images/icon16.png",
      "18": "assets/images/icon18.png",
      "19": "assets/images/icon19.png",
      "32": "assets/images/icon32.png",
      "36": "assets/images/icon36.png",
      "38": "assets/images/icon38.png",
      "48": "assets/images/icon48.png",
      "64": "assets/images/icon64.png",
      "128": "assets/images/icon128.png"
    }
  },
  "author": "Google Gemini Sidepanel - Tabbee",
  "version": "1.2",
  "background": {
    "service_worker": "assets/js/background.js"
  },
  "side_panel": {
    "default_path": "index.html"
  },
  "update_url": "https://clients2.google.com/service/update2/crx",
  "description": "__MSG_description__",
  "permissions": [
    "storage",
    "unlimitedStorage",
    "declarativeNetRequest",
    "declarativeNetRequestFeedback",
    "sidePanel"
  ],
  "default_locale": "en",
  "manifest_version": 3,
  "declarative_net_request": {
    "rule_resources": [
      {
        "id": "ruleset_1",
        "path": "rules.json",
        "enabled": true
      }
    ]
  },
  "optional_host_permissions": [
    "http://gemini.google.com/*",
    "https://gemini.google.com/*"
  ]
}

by ✦ Astarte

Google Gemini Sidepanel - Tabbee

Extension Details

Context-Aware Verdict

Findings

Security Analysis Details

Required Permissions:

Embedded URLs (63 total):

Raw Manifest

Detections

Manifest Findings