MYO Studio

Version 1.16.0 View in Chrome Web Store

Last scanned: 20 days ago | force re-scan

Extension Details

Rating: 4.9 ★ (28 ratings)

Size: 1.65MiB

Last Updated: May 12, 2025

Users: 7,000

Developer Info: Ashworth Digital Ltd6 Croy Buchanan Steading Killearn G63 9QU GB

Context-Aware Verdict

MEDIUM

Risk Level

Trust Factors:

- The extension has a relatively high number of users (7,000) and a good rating (4.9/5), which suggests it is generally trusted by users.

- The developer information is provided, which adds some transparency.

Concerns:

- The extension has broad host permissions (*://*.yotoicons.com/*, *://*.goodreads.com/*, *://api.myostudio.co.uk/*), which could potentially be used to access sensitive data or track browsing activity on those domains.

- The content scripts have broad access to *://my.yotoplay.com/*, which could potentially be used to modify or monitor content on that domain.

Recommendations:

- Review the extension's privacy policy and terms of service to understand how your data may be collected and used.

- Consider running the extension in a separate Chrome profile or incognito mode to isolate its activity from your main browsing session.

- Monitor the extension's behavior and permissions in case they change in future updates.

- If you have concerns about the extension's data collection practices or potential privacy risks, consider uninstalling it or using an alternative extension with more limited permissions.

Security Analysis

MEDIUM

Overall Risk

Based on 1 total findings, ranked without considering overall context, including 1 high-risk and 0 medium-risk findings.

HIGH

Broad Host Permissions

This extension has broad host permissions allowing it to access many or all websites. This could potentially be used to steal sensitive data or track browsing activity.

Security Analysis Details

Host Permissions:

*://*.yotoicons.com/*
*://*.goodreads.com/*
*://api.myostudio.co.uk/*

Embedded URLs (875 total):

Page 1 of 11

Raw Manifest

{
  "name": "MYO Studio",
  "icons": {
    "48": "icons/icon48.png",
    "128": "icons/icon128.png"
  },
  "version": "1.16.0",
  "background": {
    "service_worker": "background.js"
  },
  "update_url": "https://clients2.google.com/service/update2/crx",
  "description": "Enhancing the process of creating Yoto Make Your Own cards.",
  "permissions": [],
  "content_scripts": [
    {
      "js": [
        "contentScript.js"
      ],
      "css": [
        "css/style.css",
        "myo-studio-components.css"
      ],
      "matches": [
        "*://my.yotoplay.com/*"
      ]
    },
    {
      "js": [
        "myo-studio-components.iife.js",
        "main.js"
      ],
      "world": "MAIN",
      "run_at": "document_end",
      "matches": [
        "*://my.yotoplay.com/*"
      ]
    }
  ],
  "host_permissions": [
    "*://*.yotoicons.com/*",
    "*://*.goodreads.com/*",
    "*://api.myostudio.co.uk/*"
  ],
  "manifest_version": 3
}

https://api.yotoplay.com/media/displayIcons/user/me/upload	https://api.yotoplay.com/media/displayIcons/user/yoto
https://api.yotoplay.com/media/coverImage/user/me/upload?imageUrl=	https://api.yotoplay.com/card/resolve/
https://api.yotoplay.com/card/family/library	https://api.yotoplay.com/content/
https://www.yotoicons.com/api/icons?	https://www.goodreads.com/search?q=
https://openlibrary.org/search?q=	https://www.goodreads.com/
https://www.yotoicons.com/icons?category=&tag=	https://yotoicons.com
https://ko-fi.com/pangolinpaws	https://www.yotoicons.com
https://vuejs.org/error-reference/#runtime-	http://www.w3.org/2000/svg
http://www.w3.org/1998/Math/MathML	http://www.w3.org/1999/xlink
https://caniuse.com/mdn-javascript_builtins_array_findlast	https://caniuse.com/mdn-javascript_builtins_array_findlastindex
http://stuartk.com/jszip	https://raw.github.com/Stuk/jszip/main/LICENSE.markdown.
https://github.com/nodeca/pako/blob/main/LICENSE	https://stuk.github.io/jszip/documentation/howto/read_zip.html
https://card-content.yotoplay.com/icons/	https://api.myostudio.co.uk
https://ko-fi.com/S6S8XBJYI	https://storage.ko-fi.com/cdn/kofi3.png?v=3
https://github.com/uuidjs/uuid#getrandomvalues-not-supported	https://card-content.yotoplay.com/yoto/pub/G-YuPYUuy_6J-GCA50v66i8V0TisSCxHpcLuPGpfizA
https://card-content.yotoplay.com/yoto/pub/G-YuPYUuy_6J-GCA50v66i8V0TisSCxHpcLuPGpfizA?width=250	https://card-content.yotoplay.com/yoto/pub/sfNodwY8fY0FmBQZ_bxooWk-sAcUjLoYjgIhOoVbtUU
https://card-content.yotoplay.com/yoto/pub/sfNodwY8fY0FmBQZ_bxooWk-sAcUjLoYjgIhOoVbtUU?width=250	https://card-content.yotoplay.com/yoto/pub/MbgW7mgRjDZmxwM5qDOt_D-3DV4Uoy-oi_hko4RPh3o
https://card-content.yotoplay.com/yoto/pub/MbgW7mgRjDZmxwM5qDOt_D-3DV4Uoy-oi_hko4RPh3o?width=250	https://card-content.yotoplay.com/yoto/pub/k4cYVD7PlOJ8wS6N8h7kDK2cqasy2K5O9H4M5ugHskI
https://card-content.yotoplay.com/yoto/pub/k4cYVD7PlOJ8wS6N8h7kDK2cqasy2K5O9H4M5ugHskI?width=250	https://card-content.yotoplay.com/yoto/pub/-InzSXcLLLq87EQGFiDtExJCXzX1QrDyd8FvpAteMJo
https://card-content.yotoplay.com/yoto/pub/-InzSXcLLLq87EQGFiDtExJCXzX1QrDyd8FvpAteMJo?width=250	https://card-content.yotoplay.com/yoto/pub/lv-xnPWDA-cURbYhSj4T-y-GJQBGku_O6nx101tn8mA
https://card-content.yotoplay.com/yoto/pub/lv-xnPWDA-cURbYhSj4T-y-GJQBGku_O6nx101tn8mA?width=250	https://card-content.yotoplay.com/yoto/pub/ApsrHqLgBGRzNN9RWXW5U27-TpJQs8qgifMHGHeB1QI
https://card-content.yotoplay.com/yoto/pub/ApsrHqLgBGRzNN9RWXW5U27-TpJQs8qgifMHGHeB1QI?width=250	https://card-content.yotoplay.com/yoto/pub/w7wILUu17rOIvRf_EumacShSN5yiDgL2MTPZHi7KsIU
https://card-content.yotoplay.com/yoto/pub/w7wILUu17rOIvRf_EumacShSN5yiDgL2MTPZHi7KsIU?width=250	https://card-content.yotoplay.com/yoto/pub/dqdPRs4vq2vHJZp6w8LAIkr66maPKAhcvhjgpJkcu04
https://card-content.yotoplay.com/yoto/pub/dqdPRs4vq2vHJZp6w8LAIkr66maPKAhcvhjgpJkcu04?width=250	https://card-content.yotoplay.com/yoto/pub/5fvbJtm4AqhjFgnrhWG0Mr_zRN2iVyb_ejDWnNOzPjM
https://card-content.yotoplay.com/yoto/pub/5fvbJtm4AqhjFgnrhWG0Mr_zRN2iVyb_ejDWnNOzPjM?width=250	https://card-content.yotoplay.com/yoto/pub/dDiVqCU4sKgoBQtqbV4qjdFpDIWNz0I_YeHaqh-rYB0
https://card-content.yotoplay.com/yoto/pub/dDiVqCU4sKgoBQtqbV4qjdFpDIWNz0I_YeHaqh-rYB0?width=250	https://card-content.yotoplay.com/yoto/pub/r0Ieo9RQXyxXNaBN0FM-ZfTSQzFNjIcIx50k-qhckX8
https://card-content.yotoplay.com/yoto/pub/r0Ieo9RQXyxXNaBN0FM-ZfTSQzFNjIcIx50k-qhckX8?width=250	https://card-content.yotoplay.com/yoto/pub/-5SfqzfgkjxFoPhc2zFLsm-ng5VJ-H6UN8qaHHHM02M
https://card-content.yotoplay.com/yoto/pub/-5SfqzfgkjxFoPhc2zFLsm-ng5VJ-H6UN8qaHHHM02M?width=250	https://card-content.yotoplay.com/yoto/pub/jfHqrGyLMApCVkGzjOh6d1Ucs2d-NQBSth-Q55A64kQ
https://card-content.yotoplay.com/yoto/pub/jfHqrGyLMApCVkGzjOh6d1Ucs2d-NQBSth-Q55A64kQ?width=250	https://card-content.yotoplay.com/yoto/pub/SwqMOI5XDpbFc_726_ISuGQ-9zDoSCZ6niYPIWUUgZA
https://card-content.yotoplay.com/yoto/pub/SwqMOI5XDpbFc_726_ISuGQ-9zDoSCZ6niYPIWUUgZA?width=250	https://card-content.yotoplay.com/yoto/pub/LW_xJnkkrbluW6Yxw6Wqqp5DPpqIE_nj7DDXzGO-HbA
https://card-content.yotoplay.com/yoto/pub/LW_xJnkkrbluW6Yxw6Wqqp5DPpqIE_nj7DDXzGO-HbA?width=250	https://card-content.yotoplay.com/yoto/pub/4p_mrT9WLP3nkVy07HPqbKFd3yJTzgI0Nr8wgI6w3gI
https://card-content.yotoplay.com/yoto/pub/4p_mrT9WLP3nkVy07HPqbKFd3yJTzgI0Nr8wgI6w3gI?width=250	https://card-content.yotoplay.com/yoto/pub/jM2CMDUpiIiWynIRMrqkZ2cJyiV8QSj95c8V2D27KIY
https://card-content.yotoplay.com/yoto/pub/jM2CMDUpiIiWynIRMrqkZ2cJyiV8QSj95c8V2D27KIY?width=250	https://card-content.yotoplay.com/yoto/pub/XENniS5L5oFtIABburpnYv9WDoAy_hz3M9H0yu8y3a0
https://card-content.yotoplay.com/yoto/pub/XENniS5L5oFtIABburpnYv9WDoAy_hz3M9H0yu8y3a0?width=250	https://card-content.yotoplay.com/yoto/pub/K78DEA1rKAExYdwy5b9bKYM6Hp2DyryAG_EoAPjNYJs
https://card-content.yotoplay.com/yoto/pub/K78DEA1rKAExYdwy5b9bKYM6Hp2DyryAG_EoAPjNYJs?width=250	https://card-content.yotoplay.com/yoto/pub/n_A5UUn7mkn_aSFB9YTsMQsqa1YDzfEn9rGL8aooqBQ
https://card-content.yotoplay.com/yoto/pub/n_A5UUn7mkn_aSFB9YTsMQsqa1YDzfEn9rGL8aooqBQ?width=250	https://card-content.yotoplay.com/yoto/pub/y2SIINJoFaGteBgRt5OX1dyJQFcgtbq9pPIjgDxUiYo
https://card-content.yotoplay.com/yoto/pub/y2SIINJoFaGteBgRt5OX1dyJQFcgtbq9pPIjgDxUiYo?width=250	https://card-content.yotoplay.com/yoto/pub/M6YOF_3ZzF_mvCImpQls6yrtn0KEhTzIHd_sE3OGZ90
https://card-content.yotoplay.com/yoto/pub/M6YOF_3ZzF_mvCImpQls6yrtn0KEhTzIHd_sE3OGZ90?width=250	https://card-content.yotoplay.com/yoto/pub/tqKlL3s8Ep9yviGhISBbKUvB9rjx0yDduUFFuexx9hg
https://card-content.yotoplay.com/yoto/pub/tqKlL3s8Ep9yviGhISBbKUvB9rjx0yDduUFFuexx9hg?width=250	https://card-content.yotoplay.com/yoto/pub/wfKe-JSjlFARDtc8BIg1QSdkbIcYqBXdN0qhsRZqCu4
https://card-content.yotoplay.com/yoto/pub/wfKe-JSjlFARDtc8BIg1QSdkbIcYqBXdN0qhsRZqCu4?width=250	https://card-content.yotoplay.com/yoto/pub/1BIMRIHGKMpFSLvDint4ibeM0D965ImczytwIaUuVVw