CRX aminer
Extension icon

One click emoji downloader for Slack

Version 1 View in Chrome Web Store

Last scanned: 6 days ago | force re-scan

Extension Details

Rating: 1.0 ★ (1 rating)
Size: 4.64KiB
Last Updated: April 28, 2022
Users: 237

Context-Aware Verdict

MEDIUM
Risk Level
Trust Factors:
- The extension has a relatively low number of users (237), which could indicate a lack of widespread trust or popularity.
- The developer information is not provided, making it difficult to assess their reputation or trustworthiness.
- The extension has only one rating, which is low (1.0), suggesting potential issues or dissatisfaction from users.
Concerns:
- The "downloads" permission is considered high-risk, as it allows the extension to download files and access the download history, potentially compromising security or privacy.
- The extension's purpose of downloading emojis for Slack does not seem to justify the need for the "downloads" permission, which raises concerns about unnecessary permissions.
Recommendations:
- Exercise caution when installing and using this extension, as the high-risk "downloads" permission may pose security risks.
- Consider using the extension in a separate Chrome profile or a sandboxed environment to isolate any potential risks.
- Monitor the extension's behavior and check for any suspicious activities related to file downloads or access to the download history.
- Look for alternative extensions with similar functionality but without the high-risk "downloads" permission, or consider using Slack's built-in emoji management features.
- If you decide to use the extension, ensure that you keep your system and Chrome browser up-to-date with the latest security patches and updates.

Security Analysis

MEDIUM
Overall Risk
Based on 1 total findings, ranked without considering overall context, including 1 high-risk and 0 medium-risk findings.
HIGH
High-Risk Permission: downloads
This extension has the downloads permission. Can download files and access download history. This could potentially be used maliciously to compromise security or privacy.