[ new scan ] [ statistics ] [ github ] [ twitter ] [ help ]

Text Summarizer

Version 1.1.1 View in Chrome Web Store

Last scanned: about 15 hours ago

Extension Details

Rating: 4.2 ★ (15 ratings)

Users: 5,000

Context-Aware Verdict

HIGH

Overall Risk

Trust Factors: The extension has a modest user base of 5,000 users with a decent 4.2-star rating, though based on only 15 reviews which is quite limited for assessment. The lack of clear developer information and company details reduces trustworthiness. The extension's core functionality of text summarization appears legitimate.

Concerns: The most significant red flag is the host permissions connecting to a specific IP address (158.160.66.115) on port 40000 using both WebSocket and HTTP protocols. This suggests data is being sent to an external server, which raises privacy concerns about what text content is being transmitted and how it's handled. The combination of tabs permission with external data transmission is particularly concerning, as it could potentially access and send sensitive information from any tab. The scripting permission combined with external connectivity amplifies these risks.

Recommendations: Given the high-risk profile, consider running this extension in a separate Chrome profile to isolate it from sensitive browsing activities. Before using, verify the legitimacy of the external server and understand what data is being transmitted. Look for alternative text summarization extensions that process data locally or use well-established, transparent services. If you must use this extension, avoid using it on pages containing sensitive information like banking, personal documents, or confidential work materials.

Findings

HIGH

High-Risk Permission: tabs

This extension has the tabs permission. Can access browser tab information and manipulate tabs. This could potentially be used maliciously to compromise security or privacy.

MEDIUM

Medium-Risk Permission: activeTab

This extension has the activeTab permission. Can access the active tab when clicking the extension icon.

MEDIUM

Medium-Risk Permission: storage

This extension has the storage permission. Can store data locally.

Security Analysis Details

Required Permissions:

tabs
tts
activeTab
storage
scripting

Host Permissions:

ws://158.160.66.115:40000/summary
http://158.160.66.115:40000/get_summary

Embedded URLs (22 total):

https://textsummarizerpro.com/welcome	https://docs.google.com/forms/d/1YWTMmT_UiXqAid7Prbw3WyrqfYzLgk5DW5iWpDYZhy8/viewform?edit_requested=true
https://onlineapp.pro/api/track-event	http://158.160.66.115:40000/translate
https://chrome.google.com/webstore/detail/	http://www.w3.org/2000/svg
http://www.w3.org/1999/xlink	https://clients2.google.com/service/update2/crx
https://onlineapp.pro/	https://onlineapp.stream/
https://onlineapp.live/	http://158.160.66.115:40000/get_summary
https://fonts.googleapis.com	https://fonts.gstatic.com
https://fonts.googleapis.com/css2?family=Poppins:wght@300	https://docs.google.com/forms/d/1f-bMmpXa3DO-s18FJ71pfXATKwNs0U6SNAQEK7L5lsQ/edit
https://platform.openai.com/api-keys	https://onlineapp.pro/paywall/581/customer-portal/get
https://github.com/MindSetLib/Ext_GPT/assets/102877316/dfaefd85-09c7-48a5-9004-d0340622bda8	https://onlineapp.pro
https://onlineapp.live	https://onlineapp.stream

Raw Manifest

{
  "key": "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh4fuMWsPsdLFhIRgW4CCds2DxW4J4LaiiJvdURqAYkRqpdIQMg/mFAsJPChcHDUinpptO/NHWaHcTSHym06NfUX7F8VOIQmiqIraN4w01ZP4I9iLPrxvn7JXYoX7eCv79CWjLOsjsjNJD9JEjxvGgkKgtgmG7/U6L+DXVgQ3FNRGnHAkQACgmpPvNxVq1kfFrTDRoRO/HmUPiP5FooXtXVG2qMmC6LcI1VE+F7wz0BeLqolF1Yq9NYY9la7IlWADSmFZnGh6HNYS+XgYvg2hgSF3WRJG3S5W3Dil2vDuYGbT9vYM9aV4DluXUEsGYGDmtzp5UhZyR9tuPDc9Ss+YdwIDAQAB",
  "name": "__MSG_appName__",
  "icons": {
    "16": "icons/16icon.png",
    "48": "icons/48icon.png",
    "96": "icons/96icon.png",
    "128": "icons/128icon.png"
  },
  "action": {
    "default_icon": {
      "48": "icons/48icon.png"
    },
    "default_popup": "./popup.html"
  },
  "version": "1.1.1",
  "background": {
    "service_worker": "background.js"
  },
  "update_url": "https://clients2.google.com/service/update2/crx",
  "description": "__MSG_shortDesc__",
  "permissions": [
    "tabs",
    "tts",
    "activeTab",
    "storage",
    "scripting"
  ],
  "default_locale": "en",
  "host_permissions": [
    "ws://158.160.66.115:40000/summary",
    "http://158.160.66.115:40000/get_summary"
  ],
  "manifest_version": 3,
  "externally_connectable": {
    "matches": [
      "https://onlineapp.pro/*",
      "https://onlineapp.stream/*",
      "https://onlineapp.live/*"
    ]
  },
  "web_accessible_resources": [
    {
      "matches": [
        "https://*/*",
        "http://*/*"
      ],
      "resources": [
        "fonts/*.woff2",
        "fonts/*.woff",
        "wall.2.0.3.js"
      ]
    }
  ]
}

by ✦ Astarte