GMB Everywhere - GBP Audit for Local SEO
Version 3.35.0 View in Chrome Web Store
Last scanned: 11 days ago
| force re-scan
Extension Details
Developer:
gmbeverywhere.com
Rating:
4.8 ★
(72 ratings)
Size:
157KiB
Last Updated:
January 21, 2025
Users:
200,000
Developer Info:
Upwards Company Inc.5 Capri Road #505
Toronto, ON M9B6B5
CA
Context-Aware Verdict
This section provides a Claude-based AI analysis that applies additional context to the risk. Results are not guaranteed to be accurate.
MEDIUM
Risk Level
Trust Factors:
- The extension has a relatively high number of users (200,000) and a good rating (4.8/5), indicating some level of trust from the user community.
- The developer is a registered company (Upwards Company Inc.), which adds credibility compared to an unknown individual developer.
Concerns:
- The extension requests the "storage" permission, allowing it to store data locally on the user's device. While this permission is often required for extensions to function properly, it also introduces potential privacy risks if misused.
- The extension has an extensive list of content script permissions, granting it access to a wide range of Google domains across various countries. This broad access may be necessary for the extension's functionality but also increases the potential attack surface.
Recommendations:
- Review the extension's privacy policy and terms of service to understand how user data is handled and stored.
- Consider running the extension in a separate Chrome profile or an incognito window to isolate it from your main browsing session, especially if you handle sensitive information.
- Regularly check for updates and reviews from other users to monitor for any potential issues or privacy concerns.
- If you have concerns about the extension's permissions or behavior, consider uninstalling it and exploring alternative solutions that better align with your privacy and security requirements.
Security Analysis
This section provides a detailed analysis of the extension's security posture, without broader context. Assumes worst-case impact.
LOW
Overall Risk
Based on 1 total findings, ranked without considering overall context, including 0 high-risk and 1 medium-risk findings.
MEDIUM
Medium-Risk Permission: storage
This extension has the storage permission. Can store data locally.
Security Analysis Details
Required Permissions:
- storage
Embedded URLs (184 total):
| http://www.w3.org/2000/svg | https://app.gmbeverywhere.com/release7/audit-dashboard.html | |
| https://app.gmbeverywhere.com/release7/teleport.html | https://www.google.com/ | |
| https://app.gmbeverywhere.com/release7/error.html | https://app.gmbeverywhere.com/release7/category-tool/category-finder.html | |
| https://app.gmbeverywhere.com/release7/ai/landing-page-ai.html | https://app.gmbeverywhere.com/release7/ai/ | |
| https://search.google.com/local/reviews?hl=en-us&placeid= | https://www.google.com/search?kgmid= | |
| https://git.io/fjule | https://git.io/fxCyr | |
| http://www.unicode.org/reports/tr35/tr35-31/tr35-dates.html#Date_Format_tokens | https://github.com/date-fns/date-fns/issues/376 | |
| https://github.com/date-fns/date-fns/blob/master/docs/upgradeGuide.md#Common-Changes | https://www.unicode.org/reports/tr35/tr35-dates.html#Date_Field_Symbol_Table | |
| https://date-fns.org/docs/getISOWeekYear | https://date-fns.org/docs/getWeekYear | |
| https://blog.date-fns.org/post/unicode-tokens-in-date-fns-v2-sreatyki91jg | https://date-fns.org/docs/Locale | |
| https://date-fns.org/docs/toDate | http://es5.github.io/#x15.9.1.1 | |
| https://github.com/kossnocorp | https://github.com/leshakoss | |
| http://www.unicode.org/reports/tr35/tr35-31/tr35-dates.html#Date_Format_Patterns | https://docs.google.com/spreadsheets/d/e/2PACX-1vQOPU3xUhplll6dyoMmVUXHKl_8CRDs6_ueLmex3SoqwhuolkuN3O05l4rqx5h1dKX8eb46Ul-CCSrq/pubhtml?gid=0&single=true | |
| https://date-fns.org/docs/setISOWeekYear | https://date-fns.org/docs/setWeekYear | |
| https://github.com/date-fns/date-fns/issues/37 | https://link.gmbeverywhere.com/on-install-page | |
| https://link.gmbeverywhere.com/onupdate | https://link.gmbeverywhere.com/on-uninstall-page | |
| https://www.google.com/maps/search/dentist%20nearby | https://clients2.google.com/service/update2/crx | |
| https://www.google.ae/ | https://www.google.am/ | |
| https://www.google.as/ | https://www.google.at/ | |
| https://www.google.az/ | https://www.google.ba/ | |
| https://www.google.be/ | https://www.google.bg/ | |
| https://www.google.bi/ | https://www.google.bs/ | |
| https://www.google.ca/ | https://www.google.cd/ | |
| https://www.google.cg/ | https://www.google.ch/ | |
| https://www.google.ci/ | https://www.google.cl/ | |
| https://www.google.co.bw/ | https://www.google.co.ck/ | |
| https://www.google.co.cr/ | https://www.google.co.hu/ | |
| https://www.google.co.id/ | https://www.google.co.il/ | |
| https://www.google.co.im/ | https://www.google.co.in/ | |
| https://www.google.co.je/ | https://www.google.co.jp/ | |
| https://www.google.co.ke/ | https://www.google.co.kr/ | |
| https://www.google.co.ls/ | https://www.google.co.ma/ | |
| https://www.google.co.nz/ | https://www.google.co.th/ | |
| https://www.google.co.ug/ | https://www.google.co.uk/ | |
| https://www.google.co.uz/ | https://www.google.co.ve/ | |
| https://www.google.co.vi/ | https://www.google.co.za/ | |
| https://www.google.co.zm/ | https://www.google.com.af/ | |
| https://www.google.com.ag/ | https://www.google.com.ar/ | |
| https://www.google.com.au/ | https://www.google.com.bd/ | |
| https://www.google.com.bo/ | https://www.google.com.br/ |
Page 1 of 3
Raw Manifest
{ "name": "__MSG_appName__", "icons": { "16": "imgs/icons/icon16.png", "32": "imgs/icons/icon32.png", "48": "imgs/icons/icon48.png", "128": "imgs/icons/icon128.png" }, "action": {}, "version": "3.35.0", "background": { "service_worker": "main-service-worker.js" }, "update_url": "https://clients2.google.com/service/update2/crx", "description": "__MSG_appDesc__", "permissions": [ "storage" ], "default_locale": "en", "content_scripts": [ { "js": [ "dist/content.bundle.js" ], "css": [], "matches": [ "https://www.google.ae/*", "https://www.google.am/*", "https://www.google.as/*", "https://www.google.at/*", "https://www.google.az/*", "https://www.google.ba/*", "https://www.google.be/*", "https://www.google.bg/*", "https://www.google.bi/*", "https://www.google.bs/*", "https://www.google.ca/*", "https://www.google.cd/*", "https://www.google.cg/*", "https://www.google.ch/*", "https://www.google.ci/*", "https://www.google.cl/*", "https://www.google.co.bw/*", "https://www.google.co.ck/*", "https://www.google.co.cr/*", "https://www.google.co.hu/*", "https://www.google.co.id/*", "https://www.google.co.il/*", "https://www.google.co.im/*", "https://www.google.co.in/*", "https://www.google.co.je/*", "https://www.google.co.jp/*", "https://www.google.co.ke/*", "https://www.google.co.kr/*", "https://www.google.co.ls/*", "https://www.google.co.ma/*", "https://www.google.co.nz/*", "https://www.google.co.th/*", "https://www.google.co.ug/*", "https://www.google.co.uk/*", "https://www.google.co.uz/*", "https://www.google.co.ve/*", "https://www.google.co.vi/*", "https://www.google.co.za/*", "https://www.google.co.zm/*", "https://www.google.com/*", "https://www.google.com.af/*", "https://www.google.com.ag/*", "https://www.google.com.ar/*", "https://www.google.com.au/*", "https://www.google.com.bd/*", "https://www.google.com.bo/*", "https://www.google.com.br/*", "https://www.google.com.bz/*", "https://www.google.com.co/*", "https://www.google.com.cu/*", "https://www.google.com.do/*", "https://www.google.com.ec/*", "https://www.google.com.eg/*", "https://www.google.com.et/*", "https://www.google.com.fj/*", "https://www.google.com.gi/*", "https://www.google.com.gt/*", "https://www.google.com.hk/*", "https://www.google.com.jm/*", "https://www.google.com.kw/*", "https://www.google.com.ly/*", "https://www.google.com.mt/*", "https://www.google.com.mx/*", "https://www.google.com.my/*", "https://www.google.com.na/*", "https://www.google.com.nf/*", "https://www.google.com.ni/*", "https://www.google.com.np/*", "https://www.google.com.om/*", "https://www.google.com.pa/*", "https://www.google.com.pe/*", "https://www.google.com.ph/*", "https://www.google.com.pk/*", "https://www.google.com.pr/*", "https://www.google.com.py/*", "https://www.google.com.qa/*", "https://www.google.com.sa/*", "https://www.google.com.sb/*", "https://www.google.com.sg/*", "https://www.google.com.sv/*", "https://www.google.com.tj/*", "https://www.google.com.tr/*", "https://www.google.com.tw/*", "https://www.google.com.ua/*", "https://www.google.com.uy/*", "https://www.google.com.uz/*", "https://www.google.com.vc/*", "https://www.google.com.vn/*", "https://www.google.cz/*", "https://www.google.de/*", "https://www.google.dj/*", "https://www.google.dk/*", "https://www.google.dm/*", "https://www.google.ee/*", "https://www.google.es/*", "https://www.google.fi/*", "https://www.google.fm/*", "https://www.google.fr/*", "https://www.google.gg/*", "https://www.google.gl/*", "https://www.google.gm/*", "https://www.google.gr/*", "https://www.google.hn/*", "https://www.google.hr/*", "https://www.google.ht/*", "https://www.google.hu/*", "https://www.google.ie/*", "https://www.google.is/*", "https://www.google.it/*", "https://www.google.jo/*", "https://www.google.kg/*", "https://www.google.kz/*", "https://www.google.li/*", "https://www.google.lk/*", "https://www.google.lt/*", "https://www.google.lu/*", "https://www.google.lv/*", "https://www.google.md/*", "https://www.google.mn/*", "https://www.google.ms/*", "https://www.google.mu/*", "https://www.google.mw/*", "https://www.google.net/*", "https://www.google.nl/*", "https://www.google.no/*", "https://www.google.nr/*", "https://www.google.nu/*", "https://www.google.off.ai/*", "https://www.google.org/*", "https://www.google.pl/*", "https://www.google.pn/*", "https://www.google.pt/*", "https://www.google.ro/*", "https://www.google.ru/*", "https://www.google.rw/*", "https://www.google.sc/*", "https://www.google.se/*", "https://www.google.sh/*", "https://www.google.si/*", "https://www.google.sk/*", "https://www.google.sm/*", "https://www.google.sn/*", "https://www.google.tm/*", "https://www.google.to/*", "https://www.google.tp/*", "https://www.google.tt/*", "https://www.google.tv/*", "https://www.google.uz/*", "https://www.google.vg/*", "https://www.google.vu/*", "https://www.google.ws/*" ] } ], "manifest_version": 3, "web_accessible_resources": [ { "matches": [ "<all_urls>" ], "resources": [ "imgs/loading.gif", "imgs/star_icon.svg", "imgs/rocket_icon.svg", "imgs/megaphone_icon.svg", "imgs/half_star_icon.svg", "imgs/pin_icon.svg", "imgs/gmb.png", "imgs/waving_hand_icon.svg", "imgs/brain_icon.svg", "audit-dashboard.html" ], "extension_ids": [] } ] }
Secure Annex (beta)
Coming soon...