CRX aminer
Extension icon

Costco Receipts Downloader

Version 3.0 View in Chrome Web Store

Last scanned: about 2 hours ago

Extension Details

Rating: 5.0 ★ (10 ratings)
Users: 1,000

Context-Aware Verdict

MEDIUM
Overall Risk
Trust Factors:

The extension has a perfect 5.0 rating from 10 reviews and serves a legitimate purpose for Costco customers who want to download their receipts. The 1,000 user base suggests moderate adoption. However, the lack of visible author and developer information reduces transparency and accountability, which is concerning for an extension handling financial data.

Concerns:

The primary concern is the broad host permissions covering multiple international Costco domains, including a wildcard pattern for *.costco.com/*. While these permissions align with the extension's stated purpose of working across different Costco websites, they represent extensive access to all Costco pages where users handle sensitive financial information, purchase history, and personal data. The activeTab permission, while standard, adds another layer of access to whatever tab is currently active.

The absence of detailed developer information makes it difficult to verify the extension's legitimacy or contact the developer if issues arise. For an extension dealing with financial receipts and shopping data, this lack of transparency is problematic.

Recommendations:

Consider running this extension in a separate Chrome profile dedicated to Costco shopping to limit exposure. Only activate the extension when specifically downloading receipts, then disable it afterward. Regularly review your Costco account for any suspicious activity. Given the financial nature of the data involved, consider alternative methods for receipt management if you're uncomfortable with the broad permissions required.

Findings

HIGH
Broad Host Permissions
This extension has broad host permissions allowing it to access many or all websites. This could potentially be used to steal sensitive data or track browsing activity.
MEDIUM
Medium-Risk Permission: activeTab
This extension has the activeTab permission. Can access the active tab when clicking the extension icon.