One click emoji downloader for Slack
Version 1 View in Chrome Web Store
Extension Details
Context-Aware Verdict
The extension has extremely limited trust indicators with only 205 users and a concerning 1.0 rating from just one review. The lack of developer information, missing last updated date, and absence of company details significantly undermines credibility. The low adoption rate suggests minimal community validation or testing.
The downloads permission is excessive for an emoji downloader that should only need to save emoji files. The extension targets Slack's emoji customization pages but could potentially access broader download functionality and history. The poor rating and minimal user base raise questions about functionality and safety. The lack of transparency regarding the developer's identity is particularly concerning for an extension requesting file system access.
Given the high risk profile, run this extension in a separate Chrome profile to isolate potential security impacts. Consider alternative emoji downloaders with better ratings, more users, and transparent developer information. Before installation, verify the extension's actual functionality matches its stated purpose. Monitor your download history for any unexpected activity if you choose to use it. The combination of powerful permissions, poor ratings, and lack of developer transparency makes this extension unsuitable for general use in your primary browser profile.
Findings
Security Analysis Details
Required Permissions:
- downloads
Embedded URLs (4 total):
| https://developer.chrome.com/docs/extensions/reference/downloads/#method-download | https://github.com/GoogleChrome/chrome-extensions-samples/blob/62a8f32a2d299c2259df6388e22a222200dec331/mv2-archive/api/downloads/download_links/popup.js#L49 | |
| https://slackmojis.com/emojis/12133-download | https://clients2.google.com/service/update2/crx |
Raw Manifest
{ "name": "One click emoji downloader for Slack", "version": "1", "background": { "service_worker": "background.js" }, "update_url": "https://clients2.google.com/service/update2/crx", "description": "Downloads slack emojis in one click", "permissions": [ "downloads" ], "content_scripts": [ { "js": [ "content.js" ], "matches": [ "https://*.slack.com/customize/emoji" ] } ], "manifest_version": 3 }
ⓘ CRXaminer has partnered with our friends at Secure Annex to provide additional findings unique to their platform.
Secure Annex also analyzes extensions from other browsers, IDEs, and can continuously monitor.
This extension may not yet be analyzed by Secure Annex.