CRX aminer
Extension icon

One Click Image Downloader - WEBP & JPEG & PNG - Pickysaver

Version 1.0.1 View in Chrome Web Store

Last scanned: 1 day ago | force re-scan

Extension Details

Rating: 5.0 ★ (1 rating)
Users: 33

Context-Aware Verdict

HIGH
Risk Level
Trust Factors:

The extension has extremely limited trust indicators with only 33 users and a single 5-star rating, which is insufficient to establish credibility. The lack of developer information, company details, and recent update history raises significant transparency concerns. While the functionality of downloading images is legitimate, the minimal user base suggests this extension hasn't been thoroughly vetted by the community.

Concerns:

The most significant concern is the broad content script injection capability across all URLs, which grants the extension access to read and modify content on every website you visit. This level of access far exceeds what's typically necessary for image downloading functionality. The extension could potentially capture sensitive information like login credentials, personal data, or browsing habits from any website. The storage permission, while less concerning, allows the extension to retain data locally without clear disclosure of what information is being stored.

Recommendations:

Given the high-risk permissions combined with the lack of established trust factors, consider running this extension in a separate Chrome profile to isolate it from your primary browsing activities. Alternatively, look for more established image downloading extensions with larger user bases and transparent developer information. If you choose to use this extension, avoid using it while accessing sensitive websites like banking or email services, and regularly review what data it might be storing locally.

Security Analysis

MEDIUM
Overall Risk
Based on 2 total findings, ranked without considering overall context, including 1 high-risk and 1 medium-risk findings.
HIGH
Broad Content Script Injection
This extension can inject scripts into any website. This means it could potentially read sensitive data, modify website content, or steal credentials.
MEDIUM
Medium-Risk Permission: storage
This extension has the storage permission. Can store data locally.