Starting analysis...
GMB Everywhere - GBP Audit for Local SEO
Version 5.4.0 View in Chrome Web Store
Last scanned: 12 days ago
| force re-scan
Extension Details
Developer:
gmbeverywhere.com
Rating:
4.7 ★
(93 ratings)
Users:
200,000
Context-Aware Verdict
This section provides a Claude-based AI analysis that applies additional context to the risk. Results are not guaranteed to be accurate.
LOW
Overall Risk
Trust Factors: The extension has a solid reputation with 200,000 users and a high 4.7-star rating from 93 reviews. It's developed by gmbeverywhere.com, which appears to be a legitimate company focused on local SEO tools. The extension is specifically designed for Google My Business (GMB) auditing, which aligns with its extensive Google domain permissions. The current version 5.4.0 suggests active development and maintenance.
Concerns: The extension requests access to an extremely broad range of Google domains worldwide (over 100 different country-specific Google sites), which while extensive, is appropriate for a global local SEO tool that needs to analyze Google My Business listings across different regions. The storage permission allows local data storage, which is reasonable for saving audit results and user preferences. However, the sheer scope of domain access could potentially be concerning if the extension were compromised.
Recommendations: This extension appears legitimate and well-suited for its intended purpose of local SEO auditing. The permissions align with its functionality, and the user base and ratings suggest reliability. Users should ensure they download it from the official Chrome Web Store and monitor for any unusual behavior. For businesses handling sensitive client data, consider using it in a dedicated work profile. Regular review of stored data and clearing extension storage periodically would be prudent security practices.
Findings
This section provides a detailed analysis of the extension's security posture, without broader context. Assumes worst-case impact.
MEDIUM
Medium-Risk Permission: storage
This extension has the storage permission. Can store data locally.
Security Analysis Details
Required Permissions:
- storage
Embedded URLs (191 total):
| https://app.gmbeverywhere.com/release7/audit-dashboard.html | https://app.gmbeverywhere.com/release7/audits/basic-audit.html | |
| https://app.gmbeverywhere.com/release7/audits/website-audit.html | https://app.gmbeverywhere.com/release7/audits/review-audit.html | |
| https://app.gmbeverywhere.com/release7/audits/post-audit.html | https://data.gmbeverywhere.com/xano/save-temporary-data-to-store | |
| https://app.gmbeverywhere.com/release7/audits/teleport.html | https://www.google.com/ | |
| https://app.gmbeverywhere.com/release7/audits/error.html | https://app.gmbeverywhere.com/release7/category-tool/category-finder.html | |
| https://app.gmbeverywhere.com/release7/ai/landing-page-ai.html | https://app.gmbeverywhere.com/release7/local-scan/local-scan.html | |
| https://app.gmbeverywhere.com/release7/ai/ | https://search.google.com/local/reviews?hl=en-us&placeid= | |
| https://www.google.com/search?kgmid= | https://git.io/fjule | |
| https://git.io/fxCyr | https://www.google | |
| http://127.0.0.1:5500/appGmbeverywhere/release7/audits/website-audit.html | http://www.unicode.org/reports/tr35/tr35-31/tr35-dates.html#Date_Format_tokens | |
| https://github.com/date-fns/date-fns/issues/376 | https://github.com/date-fns/date-fns/blob/master/docs/upgradeGuide.md#Common-Changes | |
| https://www.unicode.org/reports/tr35/tr35-dates.html#Date_Field_Symbol_Table | https://date-fns.org/docs/getISOWeekYear | |
| https://date-fns.org/docs/getWeekYear | https://blog.date-fns.org/post/unicode-tokens-in-date-fns-v2-sreatyki91jg | |
| https://date-fns.org/docs/Locale | https://date-fns.org/docs/toDate | |
| http://es5.github.io/#x15.9.1.1 | https://github.com/kossnocorp | |
| https://github.com/leshakoss | http://www.unicode.org/reports/tr35/tr35-31/tr35-dates.html#Date_Format_Patterns | |
| https://docs.google.com/spreadsheets/d/e/2PACX-1vQOPU3xUhplll6dyoMmVUXHKl_8CRDs6_ueLmex3SoqwhuolkuN3O05l4rqx5h1dKX8eb46Ul-CCSrq/pubhtml?gid=0&single=true | https://date-fns.org/docs/setISOWeekYear | |
| https://date-fns.org/docs/setWeekYear | https://github.com/date-fns/date-fns/issues/37 | |
| http://www.w3.org/2000/svg | https://www.google.com/maps/search/dentist%20nearby | |
| https://www.gmbeverywhere.com/update-page | https://app.gmbeverywhere.com/release7/admin-pages/uninstall-page.html | |
| https://clients2.google.com/service/update2/crx | https://www.google.ae/ | |
| https://www.google.am/ | https://www.google.as/ | |
| https://www.google.at/ | https://www.google.az/ | |
| https://www.google.ba/ | https://www.google.be/ | |
| https://www.google.bg/ | https://www.google.bi/ | |
| https://www.google.bs/ | https://www.google.ca/ | |
| https://www.google.cd/ | https://www.google.cg/ | |
| https://www.google.ch/ | https://www.google.ci/ | |
| https://www.google.cl/ | https://www.google.co.bw/ | |
| https://www.google.co.ck/ | https://www.google.co.cr/ | |
| https://www.google.co.hu/ | https://www.google.co.id/ | |
| https://www.google.co.il/ | https://www.google.co.im/ | |
| https://www.google.co.in/ | https://www.google.co.je/ | |
| https://www.google.co.jp/ | https://www.google.co.ke/ | |
| https://www.google.co.kr/ | https://www.google.co.ls/ | |
| https://www.google.co.ma/ | https://www.google.co.nz/ | |
| https://www.google.co.th/ | https://www.google.co.ug/ | |
| https://www.google.co.uk/ | https://www.google.co.uz/ | |
| https://www.google.co.ve/ | https://www.google.co.vi/ | |
| https://www.google.co.za/ | https://www.google.co.zm/ |
Page 1 of 3
Raw Manifest
{ "name": "GMB Everywhere - GBP Audit for Local SEO", "icons": { "16": "imgs/icons/icon16.png", "32": "imgs/icons/icon32.png", "48": "imgs/icons/icon48.png", "128": "imgs/icons/icon128.png" }, "action": {}, "version": "5.4.0", "background": { "service_worker": "main-service-worker.js" }, "update_url": "https://clients2.google.com/service/update2/crx", "description": "Find GMB categories, GMB Audits, Review audit, and Post audit. Spy, audit, and crush your GMB competitor with this Local SEO tool.", "permissions": [ "storage" ], "content_scripts": [ { "js": [ "dist/content.bundle.js" ], "css": [], "matches": [ "https://www.google.ae/*", "https://www.google.am/*", "https://www.google.as/*", "https://www.google.at/*", "https://www.google.az/*", "https://www.google.ba/*", "https://www.google.be/*", "https://www.google.bg/*", "https://www.google.bi/*", "https://www.google.bs/*", "https://www.google.ca/*", "https://www.google.cd/*", "https://www.google.cg/*", "https://www.google.ch/*", "https://www.google.ci/*", "https://www.google.cl/*", "https://www.google.co.bw/*", "https://www.google.co.ck/*", "https://www.google.co.cr/*", "https://www.google.co.hu/*", "https://www.google.co.id/*", "https://www.google.co.il/*", "https://www.google.co.im/*", "https://www.google.co.in/*", "https://www.google.co.je/*", "https://www.google.co.jp/*", "https://www.google.co.ke/*", "https://www.google.co.kr/*", "https://www.google.co.ls/*", "https://www.google.co.ma/*", "https://www.google.co.nz/*", "https://www.google.co.th/*", "https://www.google.co.ug/*", "https://www.google.co.uk/*", "https://www.google.co.uz/*", "https://www.google.co.ve/*", "https://www.google.co.vi/*", "https://www.google.co.za/*", "https://www.google.co.zm/*", "https://www.google.com/*", "https://www.google.com.af/*", "https://www.google.com.ag/*", "https://www.google.com.ar/*", "https://www.google.com.au/*", "https://www.google.com.bd/*", "https://www.google.com.bo/*", "https://www.google.com.br/*", "https://www.google.com.bz/*", "https://www.google.com.co/*", "https://www.google.com.cu/*", "https://www.google.com.do/*", "https://www.google.com.ec/*", "https://www.google.com.eg/*", "https://www.google.com.et/*", "https://www.google.com.fj/*", "https://www.google.com.gi/*", "https://www.google.com.gt/*", "https://www.google.com.hk/*", "https://www.google.com.jm/*", "https://www.google.com.kw/*", "https://www.google.com.ly/*", "https://www.google.com.mt/*", "https://www.google.com.mx/*", "https://www.google.com.my/*", "https://www.google.com.na/*", "https://www.google.com.nf/*", "https://www.google.com.ni/*", "https://www.google.com.np/*", "https://www.google.com.om/*", "https://www.google.com.pa/*", "https://www.google.com.pe/*", "https://www.google.com.ph/*", "https://www.google.com.pk/*", "https://www.google.com.pr/*", "https://www.google.com.py/*", "https://www.google.com.qa/*", "https://www.google.com.sa/*", "https://www.google.com.sb/*", "https://www.google.com.sg/*", "https://www.google.com.sv/*", "https://www.google.com.tj/*", "https://www.google.com.tr/*", "https://www.google.com.tw/*", "https://www.google.com.ua/*", "https://www.google.com.uy/*", "https://www.google.com.uz/*", "https://www.google.com.vc/*", "https://www.google.com.vn/*", "https://www.google.cz/*", "https://www.google.de/*", "https://www.google.dj/*", "https://www.google.dk/*", "https://www.google.dm/*", "https://www.google.ee/*", "https://www.google.es/*", "https://www.google.fi/*", "https://www.google.fm/*", "https://www.google.fr/*", "https://www.google.gg/*", "https://www.google.gl/*", "https://www.google.gm/*", "https://www.google.gr/*", "https://www.google.hn/*", "https://www.google.hr/*", "https://www.google.ht/*", "https://www.google.hu/*", "https://www.google.ie/*", "https://www.google.is/*", "https://www.google.it/*", "https://www.google.jo/*", "https://www.google.kg/*", "https://www.google.kz/*", "https://www.google.li/*", "https://www.google.lk/*", "https://www.google.lt/*", "https://www.google.lu/*", "https://www.google.lv/*", "https://www.google.md/*", "https://www.google.mn/*", "https://www.google.ms/*", "https://www.google.mu/*", "https://www.google.mw/*", "https://www.google.net/*", "https://www.google.nl/*", "https://www.google.no/*", "https://www.google.nr/*", "https://www.google.nu/*", "https://www.google.off.ai/*", "https://www.google.org/*", "https://www.google.pl/*", "https://www.google.pn/*", "https://www.google.pt/*", "https://www.google.ro/*", "https://www.google.ru/*", "https://www.google.rw/*", "https://www.google.sc/*", "https://www.google.se/*", "https://www.google.sh/*", "https://www.google.si/*", "https://www.google.sk/*", "https://www.google.sm/*", "https://www.google.sn/*", "https://www.google.tm/*", "https://www.google.to/*", "https://www.google.tp/*", "https://www.google.tt/*", "https://www.google.tv/*", "https://www.google.uz/*", "https://www.google.vg/*", "https://www.google.vu/*", "https://www.google.ws/*" ] } ], "manifest_version": 3, "web_accessible_resources": [ { "matches": [ "<all_urls>" ], "resources": [ "imgs/loading.gif", "imgs/star_icon.svg", "imgs/rocket_icon.svg", "imgs/megaphone_icon.svg", "imgs/half_star_icon.svg", "imgs/pin_icon.svg", "imgs/gmb.png", "imgs/waving_hand_icon.svg", "imgs/brain_icon.svg", "imgs/desktop_icon.svg", "audit-dashboard.html" ], "extension_ids": [] } ] }
ⓘ CRXaminer has partnered with our friends at Secure Annex to provide additional findings unique to their platform.
Secure Annex also analyzes extensions from other browsers, IDEs, and can continuously monitor.
Loading Secure Annex data...
Unable to load Secure Annex data.
This extension may not yet be analyzed by Secure Annex.
Detections
0Critical
0
High
0
Medium
0
Low
0
Has Verdicts
Yes
Manifest Findings
0Critical
0
High
0
Medium
0
Low
0
Secure Annex analyzed version: -