The extension has a moderate user base of 30,000 users, which suggests some level of community adoption. However, the relatively low rating of 3.1 out of 5 from 104 reviews raises concerns about user satisfaction and potentially problematic functionality. The lack of clear developer information makes it difficult to assess the company's reputation and trustworthiness.
The primary security concern is the broad content script injection capability that allows the extension to run scripts on all websites (*://*/*). While this functionality may be necessary for a web clipper to capture content from any webpage, it creates significant security risks. The extension could potentially access sensitive information like passwords, personal data, or financial information on banking sites. The combination of broad permissions with a below-average user rating suggests possible issues with the extension's implementation or behavior.
Given the medium risk level, consider running this extension in a separate Chrome profile dedicated to web clipping activities. Avoid using it while accessing sensitive websites like banking, email, or other accounts containing personal information. Monitor the extension's behavior closely and consider alternative web clipping tools with better security practices and higher user ratings. If you must use this extension, regularly review what data it has access to and consider disabling it when not actively clipping content.
| https://clients2.google.com/service/update2/crx |
{ "name": "UpNote Web Clipper", "icons": { "16": "16.png", "32": "32.png", "48": "96.png", "96": "192.png", "128": "256.png" }, "action": {}, "version": "1.2.2", "background": { "service_worker": "background.js" }, "update_url": "https://clients2.google.com/service/update2/crx", "description": "Save article to UpNote app", "permissions": [], "content_scripts": [ { "js": [ "contentScript.js" ], "matches": [ "*://*/*" ] } ], "manifest_version": 3 }
ⓘ CRXaminer has partnered with our friends at Secure Annex to provide additional findings unique to their platform.
Secure Annex also analyzes extensions from other browsers, IDEs, and can continuously monitor.
This extension may not yet be analyzed by Secure Annex.