One click emoji downloader for Slack

Version 1 View in Chrome Web Store

Last scanned: about 23 hours ago

Extension Details

Rating: 1.0 ★ (1 rating)

Users: 201

Context-Aware Verdict

HIGH

Risk Level

Trust Factors:

The extension has extremely limited trust indicators with only 201 users and a concerning 1.0 rating from just one review. The lack of developer information, missing last updated date, and absence of company details significantly undermines credibility. The low adoption rate suggests either a new extension or one that users avoid.

Concerns:

The downloads permission is excessive for a simple emoji downloader, as it grants access to the entire download history and ability to download any files. The content script injection specifically targets Slack's emoji customization pages, which could potentially access sensitive workspace data. The combination of broad download capabilities with targeted Slack access creates privacy risks. The poor rating and minimal user base suggest potential functionality or security issues that early adopters have encountered.

Recommendations:

Given the high-risk permission model and poor trust indicators, avoid installing this extension. If emoji downloading functionality is needed, seek established alternatives with better ratings and larger user bases. If you must use this extension, run it in a completely separate Chrome profile isolated from your main browsing and work accounts. Monitor your download folder for any unexpected files and regularly review your download history for unauthorized activity. Consider using Slack's built-in emoji import features instead.

Security Analysis

MEDIUM

Overall Risk

Based on 1 total findings, ranked without considering overall context, including 1 high-risk and 0 medium-risk findings.

HIGH

High-Risk Permission: downloads

This extension has the downloads permission. Can download files and access download history. This could potentially be used maliciously to compromise security or privacy.

Raw Manifest

{
  "name": "One click emoji downloader for Slack",
  "version": "1",
  "background": {
    "service_worker": "background.js"
  },
  "update_url": "https://clients2.google.com/service/update2/crx",
  "description": "Downloads slack emojis in one click",
  "permissions": [
    "downloads"
  ],
  "content_scripts": [
    {
      "js": [
        "content.js"
      ],
      "matches": [
        "https://*.slack.com/customize/emoji"
      ]
    }
  ],
  "manifest_version": 3
}

https://developer.chrome.com/docs/extensions/reference/downloads/#method-download	https://github.com/GoogleChrome/chrome-extensions-samples/blob/62a8f32a2d299c2259df6388e22a222200dec331/mv2-archive/api/downloads/download_links/popup.js#L49
https://slackmojis.com/emojis/12133-download	https://clients2.google.com/service/update2/crx

One click emoji downloader for Slack

Extension Details

Context-Aware Verdict

Security Analysis

Security Analysis Details

Required Permissions:

Embedded URLs (4 total):

Raw Manifest

Secure Annex (beta)