Kakashi Hatake - The Legendary Copy Ninja!
Version 1.1.4 View in Chrome Web Store
Extension Details
Context-Aware Verdict
The extension has a perfect 5.0 rating, though this is based on only 3 reviews which limits reliability. With 1,000 users, it has a modest user base that suggests some level of community acceptance. The extension uses Manifest V3, which is Google's latest and more secure extension framework. The minimal security findings and simple permission structure indicate a relatively straightforward implementation.
The primary concern is the lack of transparency regarding the developer - no author name or developer information is provided, which makes it difficult to assess credibility or contact support if needed. The small number of ratings (only 3) makes the perfect score less meaningful as an indicator of quality. The "search" permission, while minimal, should ideally have a clear justification in the extension's functionality description.
This extension appears to be low risk for general use given its minimal permissions and security findings. However, due to the anonymous developer and limited user feedback, consider monitoring the extension's behavior after installation. The single "search" permission is relatively harmless but ensure the extension's actual functionality aligns with your expectations. If you're particularly security-conscious, you could run this in a separate Chrome profile, though the risk level doesn't strongly necessitate this precaution.
Findings
Security Analysis Details
Required Permissions:
- search
Embedded URLs (77 total):
| https://getbootstrap.com/ | https://github.com/twbs/bootstrap/blob/main/LICENSE | |
| https://www.w3.org/TR/mediaqueries-4/#mq-min-max | https://bugs.webkit.org/show_bug.cgi?id=178261 | |
| https://www.w3.org/TR/WCAG20/#visual-audio-contrast-contrast | http://www.w3.org/2000/svg | |
| https://github.com/react-bootstrap/react-bootstrap/issues/6039 | https://github.com/philipwalton/flexbugs#flexbug-4 | |
| https://github.com/sass/sass/issues/2383#issuecomment-336349172 | https://github.com/twbs/rfs/blob/main/LICENSE | |
| https://github.com/twbs/rfs/issues/14 | https://github.com/necolas/normalize.css | |
| https://github.com/twbs/bootstrap/issues/19402 | https://github.com/twbs/bootstrap/issues/24093 | |
| https://github.com/twbs/bootstrap/pull/30562 | https://github.com/twbs/bootstrap/issues/24990 | |
| https://stackoverflow.com/a/54997118 | https://github.com/twbs/bootstrap/issues/12359 | |
| https://html.spec.whatwg.org/multipage/#the-fieldset-and-legend-elements | https://github.com/twbs/bootstrap/issues/29712 | |
| https://github.com/twbs/bootstrap/issues/18842 | https://github.com/twbs/bootstrap/issues/11586. | |
| https://rtlstyling.com/posts/rtl-styling#form-inputs | https://rtlcss.com/learn/usage-guide/control-directives/#raw | |
| https://github.com/sass/node-sass/issues/2251 | https://www.a11yproject.com/posts/2013-01-11-how-to-hide-content/ | |
| https://kittygiraudel.com/2016/10/13/css-hide-and-seek/ | https://github.com/twbs/bootstrap/issues/25686 | |
| https://www.w3.org/TR/2013/NOTE-WCAG20-TECHS-20130905/G1 | https://github.com/twbs/bootstrap/issues/18178 | |
| https://codepen.io/miriamsuzanne/full/vYNgodb | https://github.com/twbs/bootstrap/issues/23307 | |
| https://bugs.webkit.org/show_bug.cgi?id=198959 | https://github.com/twbs/bootstrap/issues/34433 | |
| https://github.com/twbs/bootstrap/pull/11526. | https://github.com/twbs/bootstrap/issues/11655. | |
| https://github.com/twbs/bootstrap/pull/29124 | https://primer.github.io/. | |
| https://github.com/twbs/bootstrap/issues/28247 | https://stackoverflow.com/questions/36247140/why-dont-flex-items-shrink-past-content-size | |
| https://github.com/sass/sass/issues/1873#issuecomment-152293725 | https://github.com/twbs/bootstrap/pull/22740#issuecomment-305868106 | |
| https://developer.mozilla.org/en-US/docs/Web/Events/click#Safari_Mobile | https://github.com/twbs/bootstrap/pull/10951. | |
| https://bugs.webkit.org/show_bug.cgi?id=158342 | https://github.com/twbs/bootstrap/issues/17695 | |
| https://github.com/twbs/bootstrap/issues/24800 | https://github.com/twbs/bootstrap/graphs/contributors | |
| https://goo.gl/pxwQGp | https://www.charistheo.io/blog/2021/02/restart-a-css-animation-with-javascript/#restarting-a-css-animation | |
| https://github.com/twbs/bootstrap/issues/32273 | https://github.com/popperjs/popper-core/issues/1223 | |
| https://github.com/popperjs/popper-core/issues/837 | https://developer.mozilla.org/en-US/docs/Web/CSS/Containing_block#identifying_the_containing_block | |
| https://github.com/facebook/flow/issues/1414 | https://github.com/popperjs/popper-core/issues/1078 | |
| https://getbootstrap.com/docs/5.3/forms/input-group/ | https://www.quirksmode.org/blog/archives/2014/02/mouse_event_bub.html | |
| https://popper.js.org | https://developer.mozilla.org/en-US/docs/Web/API/Window/innerWidth#usage_notes | |
| https://github.com/angular/angular/blob/15.2.8/packages/core/src/sanitization/url_sanitizer.ts#L38 | https://stackoverflow.com/questions/49875255 | |
| https://fonts.googleapis.com/css2?family=Playfair+Display&family=Poppins:wght@100&family=Roboto:wght@300&display=swap | http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd | |
| https://github.com/twbs/bootstrap/blob/master/LICENSE | https://fonts.googleapis.com/css2?family=Lato&display=swap | |
| https://fonts.googleapis.com/css?family=Open+Sans | https://discord.com/channels/@me | |
| https://www.instagram.com | https://dekuy.com | |
| https://twitter.com/?lang=en | https://open.spotify.com/ | |
| https://www.reddit.com | https://tr.pinterest.com | |
| https://gameograf.com/?utm_source=dekuy&utm_medium=dekuy | https://gameograf.com/?utm_source=dekuy&utm_medium=dekuyhttps://dekuy.com/ | |
| https://clients2.google.com/service/update2/crx |
Raw Manifest
{ "name": "__MSG_appName__", "icons": { "128": "/img/128.png" }, "action": { "default_icon": { "128": "/img/128.png" }, "browser_style": false, "default_title": "New Tab" }, "version": "1.1.4", "background": { "service_worker": "/js/bg.js" }, "update_url": "https://clients2.google.com/service/update2/crx", "description": "__MSG_appDesc__", "permissions": [ "search" ], "default_locale": "en", "manifest_version": 3, "chrome_url_overrides": { "newtab": "index.html" } }
ⓘ CRXaminer has partnered with our friends at Secure Annex to provide additional findings unique to their platform.
Secure Annex also analyzes extensions from other browsers, IDEs, and can continuously monitor.
This extension may not yet be analyzed by Secure Annex.