GMB Everywhere - GBP Audit for Local SEO
Version 3.35.0 View in Chrome Web Store
Last scanned: 6 months ago
| force re-scan
Extension Details
Developer:
gmbeverywhere.com
Rating:
4.8 ★
(75 ratings)
Size:
157KiB
Last Updated:
January 21, 2025
Users:
200,000
Developer Info:
Upwards Company Inc.2233 Argentia Rd
#302A
Mississauga, ON L5N 2X7
CA
Context-Aware Verdict
This section provides a Claude-based AI analysis that applies additional context to the risk. Results are not guaranteed to be accurate.
LOW
Overall Risk
Trust Factors:
- The extension has a relatively high number of users (200,000) and a good rating (4.8/5), indicating that many users find it useful and trustworthy.
- The developer, Upwards Company Inc., appears to be a legitimate business based on the provided address.
Concerns:
- The "storage" permission allows the extension to store data locally, which could potentially be misused to store sensitive information.
- The extension has access to a wide range of Google domains across various countries, which may be more than necessary for its stated purpose of auditing Google Business Profiles.
Recommendations:
1. Review the extension's privacy policy and terms of service to understand how your data is being collected, used, and stored.
2. Consider running the extension in a separate Chrome profile or incognito mode to isolate its access to your browsing data.
3. Periodically review the extension's permissions and revoke any unnecessary ones.
4. Keep the extension updated to the latest version to ensure you have the latest security patches and bug fixes.
5. If you have any concerns about the extension's behavior or data handling practices, consider uninstalling it and using alternative tools or services.
Overall, while the extension appears to be relatively low risk based on the provided information, it's always a good practice to exercise caution when installing third-party extensions and to regularly review their permissions and data handling practices.
Findings
This section provides a detailed analysis of the extension's security posture, without broader context. Assumes worst-case impact.
MEDIUM
Medium-Risk Permission: storage
This extension has the storage permission. Can store data locally.
Security Analysis Details
Required Permissions:
- storage
Embedded URLs (184 total):
| http://www.w3.org/2000/svg | https://app.gmbeverywhere.com/release7/audit-dashboard.html | |
| https://app.gmbeverywhere.com/release7/teleport.html | https://www.google.com/ | |
| https://app.gmbeverywhere.com/release7/error.html | https://app.gmbeverywhere.com/release7/category-tool/category-finder.html | |
| https://app.gmbeverywhere.com/release7/ai/landing-page-ai.html | https://app.gmbeverywhere.com/release7/ai/ | |
| https://search.google.com/local/reviews?hl=en-us&placeid= | https://www.google.com/search?kgmid= | |
| https://git.io/fjule | https://git.io/fxCyr | |
| http://www.unicode.org/reports/tr35/tr35-31/tr35-dates.html#Date_Format_tokens | https://github.com/date-fns/date-fns/issues/376 | |
| https://github.com/date-fns/date-fns/blob/master/docs/upgradeGuide.md#Common-Changes | https://www.unicode.org/reports/tr35/tr35-dates.html#Date_Field_Symbol_Table | |
| https://date-fns.org/docs/getISOWeekYear | https://date-fns.org/docs/getWeekYear | |
| https://blog.date-fns.org/post/unicode-tokens-in-date-fns-v2-sreatyki91jg | https://date-fns.org/docs/Locale | |
| https://date-fns.org/docs/toDate | http://es5.github.io/#x15.9.1.1 | |
| https://github.com/kossnocorp | https://github.com/leshakoss | |
| http://www.unicode.org/reports/tr35/tr35-31/tr35-dates.html#Date_Format_Patterns | https://docs.google.com/spreadsheets/d/e/2PACX-1vQOPU3xUhplll6dyoMmVUXHKl_8CRDs6_ueLmex3SoqwhuolkuN3O05l4rqx5h1dKX8eb46Ul-CCSrq/pubhtml?gid=0&single=true | |
| https://date-fns.org/docs/setISOWeekYear | https://date-fns.org/docs/setWeekYear | |
| https://github.com/date-fns/date-fns/issues/37 | https://link.gmbeverywhere.com/on-install-page | |
| https://link.gmbeverywhere.com/onupdate | https://link.gmbeverywhere.com/on-uninstall-page | |
| https://www.google.com/maps/search/dentist%20nearby | https://clients2.google.com/service/update2/crx | |
| https://www.google.ae/ | https://www.google.am/ | |
| https://www.google.as/ | https://www.google.at/ | |
| https://www.google.az/ | https://www.google.ba/ | |
| https://www.google.be/ | https://www.google.bg/ | |
| https://www.google.bi/ | https://www.google.bs/ | |
| https://www.google.ca/ | https://www.google.cd/ | |
| https://www.google.cg/ | https://www.google.ch/ | |
| https://www.google.ci/ | https://www.google.cl/ | |
| https://www.google.co.bw/ | https://www.google.co.ck/ | |
| https://www.google.co.cr/ | https://www.google.co.hu/ | |
| https://www.google.co.id/ | https://www.google.co.il/ | |
| https://www.google.co.im/ | https://www.google.co.in/ | |
| https://www.google.co.je/ | https://www.google.co.jp/ | |
| https://www.google.co.ke/ | https://www.google.co.kr/ | |
| https://www.google.co.ls/ | https://www.google.co.ma/ | |
| https://www.google.co.nz/ | https://www.google.co.th/ | |
| https://www.google.co.ug/ | https://www.google.co.uk/ | |
| https://www.google.co.uz/ | https://www.google.co.ve/ | |
| https://www.google.co.vi/ | https://www.google.co.za/ | |
| https://www.google.co.zm/ | https://www.google.com.af/ | |
| https://www.google.com.ag/ | https://www.google.com.ar/ | |
| https://www.google.com.au/ | https://www.google.com.bd/ | |
| https://www.google.com.bo/ | https://www.google.com.br/ |
Page 1 of 3
Raw Manifest
{ "name": "__MSG_appName__", "icons": { "16": "imgs/icons/icon16.png", "32": "imgs/icons/icon32.png", "48": "imgs/icons/icon48.png", "128": "imgs/icons/icon128.png" }, "action": {}, "version": "3.35.0", "background": { "service_worker": "main-service-worker.js" }, "update_url": "https://clients2.google.com/service/update2/crx", "description": "__MSG_appDesc__", "permissions": [ "storage" ], "default_locale": "en", "content_scripts": [ { "js": [ "dist/content.bundle.js" ], "css": [], "matches": [ "https://www.google.ae/*", "https://www.google.am/*", "https://www.google.as/*", "https://www.google.at/*", "https://www.google.az/*", "https://www.google.ba/*", "https://www.google.be/*", "https://www.google.bg/*", "https://www.google.bi/*", "https://www.google.bs/*", "https://www.google.ca/*", "https://www.google.cd/*", "https://www.google.cg/*", "https://www.google.ch/*", "https://www.google.ci/*", "https://www.google.cl/*", "https://www.google.co.bw/*", "https://www.google.co.ck/*", "https://www.google.co.cr/*", "https://www.google.co.hu/*", "https://www.google.co.id/*", "https://www.google.co.il/*", "https://www.google.co.im/*", "https://www.google.co.in/*", "https://www.google.co.je/*", "https://www.google.co.jp/*", "https://www.google.co.ke/*", "https://www.google.co.kr/*", "https://www.google.co.ls/*", "https://www.google.co.ma/*", "https://www.google.co.nz/*", "https://www.google.co.th/*", "https://www.google.co.ug/*", "https://www.google.co.uk/*", "https://www.google.co.uz/*", "https://www.google.co.ve/*", "https://www.google.co.vi/*", "https://www.google.co.za/*", "https://www.google.co.zm/*", "https://www.google.com/*", "https://www.google.com.af/*", "https://www.google.com.ag/*", "https://www.google.com.ar/*", "https://www.google.com.au/*", "https://www.google.com.bd/*", "https://www.google.com.bo/*", "https://www.google.com.br/*", "https://www.google.com.bz/*", "https://www.google.com.co/*", "https://www.google.com.cu/*", "https://www.google.com.do/*", "https://www.google.com.ec/*", "https://www.google.com.eg/*", "https://www.google.com.et/*", "https://www.google.com.fj/*", "https://www.google.com.gi/*", "https://www.google.com.gt/*", "https://www.google.com.hk/*", "https://www.google.com.jm/*", "https://www.google.com.kw/*", "https://www.google.com.ly/*", "https://www.google.com.mt/*", "https://www.google.com.mx/*", "https://www.google.com.my/*", "https://www.google.com.na/*", "https://www.google.com.nf/*", "https://www.google.com.ni/*", "https://www.google.com.np/*", "https://www.google.com.om/*", "https://www.google.com.pa/*", "https://www.google.com.pe/*", "https://www.google.com.ph/*", "https://www.google.com.pk/*", "https://www.google.com.pr/*", "https://www.google.com.py/*", "https://www.google.com.qa/*", "https://www.google.com.sa/*", "https://www.google.com.sb/*", "https://www.google.com.sg/*", "https://www.google.com.sv/*", "https://www.google.com.tj/*", "https://www.google.com.tr/*", "https://www.google.com.tw/*", "https://www.google.com.ua/*", "https://www.google.com.uy/*", "https://www.google.com.uz/*", "https://www.google.com.vc/*", "https://www.google.com.vn/*", "https://www.google.cz/*", "https://www.google.de/*", "https://www.google.dj/*", "https://www.google.dk/*", "https://www.google.dm/*", "https://www.google.ee/*", "https://www.google.es/*", "https://www.google.fi/*", "https://www.google.fm/*", "https://www.google.fr/*", "https://www.google.gg/*", "https://www.google.gl/*", "https://www.google.gm/*", "https://www.google.gr/*", "https://www.google.hn/*", "https://www.google.hr/*", "https://www.google.ht/*", "https://www.google.hu/*", "https://www.google.ie/*", "https://www.google.is/*", "https://www.google.it/*", "https://www.google.jo/*", "https://www.google.kg/*", "https://www.google.kz/*", "https://www.google.li/*", "https://www.google.lk/*", "https://www.google.lt/*", "https://www.google.lu/*", "https://www.google.lv/*", "https://www.google.md/*", "https://www.google.mn/*", "https://www.google.ms/*", "https://www.google.mu/*", "https://www.google.mw/*", "https://www.google.net/*", "https://www.google.nl/*", "https://www.google.no/*", "https://www.google.nr/*", "https://www.google.nu/*", "https://www.google.off.ai/*", "https://www.google.org/*", "https://www.google.pl/*", "https://www.google.pn/*", "https://www.google.pt/*", "https://www.google.ro/*", "https://www.google.ru/*", "https://www.google.rw/*", "https://www.google.sc/*", "https://www.google.se/*", "https://www.google.sh/*", "https://www.google.si/*", "https://www.google.sk/*", "https://www.google.sm/*", "https://www.google.sn/*", "https://www.google.tm/*", "https://www.google.to/*", "https://www.google.tp/*", "https://www.google.tt/*", "https://www.google.tv/*", "https://www.google.uz/*", "https://www.google.vg/*", "https://www.google.vu/*", "https://www.google.ws/*" ] } ], "manifest_version": 3, "web_accessible_resources": [ { "matches": [ "<all_urls>" ], "resources": [ "imgs/loading.gif", "imgs/star_icon.svg", "imgs/rocket_icon.svg", "imgs/megaphone_icon.svg", "imgs/half_star_icon.svg", "imgs/pin_icon.svg", "imgs/gmb.png", "imgs/waving_hand_icon.svg", "imgs/brain_icon.svg", "audit-dashboard.html" ], "extension_ids": [] } ] }
ⓘ CRXaminer has partnered with our friends at Secure Annex to provide additional findings unique to their platform.
Secure Annex also analyzes extensions from other browsers, IDEs, and can continuously monitor.
Loading Secure Annex data...
Unable to load Secure Annex data.
This extension may not yet be analyzed by Secure Annex.
Detections
0Critical
0
High
0
Medium
0
Low
0
Has Verdicts
Yes
Manifest Findings
0Critical
0
High
0
Medium
0
Low
0
Secure Annex analyzed version: -