Extension Details
Context-Aware Verdict
The extension has a reasonable user base of 9,000 users with a solid 4.3-star rating from 170 reviews, indicating generally positive user experiences. The extension uses Manifest V3, which provides better security controls compared to older versions. The functionality appears straightforward - sorting Amazon products by review count - which aligns with the extensive Amazon domain permissions.
The primary concern is the broad scope of host permissions covering 24 different Amazon domains worldwide. While this extensive access is functionally necessary for the extension to work across all Amazon marketplaces, it represents a significant attack surface. The extension can access and potentially modify content on all these Amazon sites. The lack of visible developer information reduces transparency and accountability.
The absence of traditional permissions (like storage, tabs, or network access) is positive, suggesting the extension operates purely through content script injection rather than requiring additional browser APIs.
This extension presents relatively low risk for its intended purpose. Users should verify they actually need functionality across multiple Amazon regions - if you only shop on one or two Amazon sites, consider looking for alternatives with more limited scope. Monitor the extension's behavior and remove it if you notice any unexpected changes to Amazon pages beyond the sorting functionality. The extension appears safe for general use but exercise normal caution when providing sensitive information on Amazon while it's active.
Findings
Security Analysis Details
Embedded URLs (3 total):
| http://www.w3.org/2000/svg | https://chromewebstore.google.com/detail/amazon-sort-by-review-cou/olefkhnepnhckieapdkjebebogajcmel/reviews | |
| https://clients2.google.com/service/update2/crx |
Raw Manifest
{ "key": "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+XOF71DxOmh+tcrolNp7SbGg7+qltOM3dMgxUiaPXU22uSxmeAvlbiO8VWBfPeL37FxkuX1Q/aY9z5ykviYqTuxWGhbsjnsrpRke1Q8I1px5Gl2AMO3G+mgAdajUZo9LRJtE4qmGO/ZxlbVepPhtbHXu0KwT2S9xMUAFIFs3JX/x7ZNK4+xK+QlnnvV0aEcJsBUjAxqxcyh6FeeCxItYHiOp8VMUp9w5Ltzx9dO9hkA6FBJcyC2sr8qibyzG2i4D5ksc1UaQ64mXtVAC8PvLBhdUgMHf+CpeQ9AYZBiJ7J/ZYs+eaMT2Veuhic/TpZubVpty4WV8wHp2htb5xy5DQIDAQAB", "name": "Amazon Sort by Review Count", "icons": { "16": "assets/icon.png", "48": "assets/icon.png", "128": "assets/icon.png" }, "action": { "default_icon": "assets/icon.png" }, "version": "4.0.2", "update_url": "https://clients2.google.com/service/update2/crx", "description": "Sort By Review Count for Amazon allows you to sort Amazon search results by their number of reviews", "content_scripts": [ { "js": [ "content.js" ], "css": [ "styles.css" ], "matches": [ "*://*.amazon.ae/*", "*://*.amazon.at/*", "*://*.amazon.be/*", "*://*.amazon.ca/*", "*://*.amazon.cn/*", "*://*.amazon.co.jp/*", "*://*.amazon.co.uk/*", "*://*.amazon.com.au/*", "*://*.amazon.com.br/*", "*://*.amazon.com.mx/*", "*://*.amazon.com.sg/*", "*://*.amazon.com.tr/*", "*://*.amazon.com/*", "*://*.amazon.de/*", "*://*.amazon.eg/*", "*://*.amazon.es/*", "*://*.amazon.fr/*", "*://*.amazon.ie/*", "*://*.amazon.in/*", "*://*.amazon.it/*", "*://*.amazon.nl/*", "*://*.amazon.pl/*", "*://*.amazon.sa/*", "*://*.amazon.se/*" ] } ], "manifest_version": 3 }
ⓘ CRXaminer has partnered with our friends at Secure Annex to provide additional findings unique to their platform.
Secure Annex also analyzes extensions from other browsers, IDEs, and can continuously monitor.
This extension may not yet be analyzed by Secure Annex.