Extension Details
Context-Aware Verdict
The extension has a decent rating of 4.9 stars from 19 reviews and 1,000 users, suggesting basic functionality works as expected. The developer website (xmlsitemaps.app) appears to be related to sitemap services, which aligns with the extension's purpose. However, the limited user base and review count make it difficult to establish strong trust indicators.
The primary concern is the excessive permissions for what should be a simple XML sitemap viewer. The <all_urls> host permission is unnecessarily broad - a legitimate sitemap extension should only need access to specific sitemap files or directories, not every website you visit. This creates potential for data harvesting, tracking browsing behavior, or accessing sensitive information across all websites. The combination of activeTab and broad host permissions means the extension can access content on any site when activated.
Consider running this extension in a separate Chrome profile to isolate it from your main browsing activities. Before using, verify that the extension actually provides valuable sitemap functionality that justifies the broad permissions. Look for alternative sitemap extensions with more restrictive permissions. If you must use this extension, disable it when not actively needed and avoid using it on sensitive websites like banking or personal accounts. Monitor your browsing for any unusual behavior or performance issues.
Findings
Security Analysis Details
Required Permissions:
- activeTab
Host Permissions:
- <all_urls>
Embedded URLs (2 total):
| https://clients2.google.com/service/update2/crx | https://fonts.googleapis.com/css2?family=Roboto:wght@300 |
Raw Manifest
{ "name": "XML Sitemap", "action": { "default_popup": "popup.html" }, "version": "1.0", "update_url": "https://clients2.google.com/service/update2/crx", "description": "A Chrome extension to view the sitemap of any website.", "permissions": [ "activeTab" ], "host_permissions": [ "<all_urls>" ], "manifest_version": 3 }
ⓘ CRXaminer has partnered with our friends at Secure Annex to provide additional findings unique to their platform.
Secure Annex also analyzes extensions from other browsers, IDEs, and can continuously monitor.
This extension may not yet be analyzed by Secure Annex.