Extension Details
Rating:
4.4 ★
(7 ratings)
Users:
2,000
Context-Aware Verdict
This section provides a Claude-based AI analysis that applies additional context to the risk. Results are not guaranteed to be accurate.
MEDIUM
Risk Level
Trust Factors:
- The extension has a relatively small user base of 2,000 users, which could indicate a lack of widespread adoption or trust.
- The developer information is not provided, making it difficult to assess their reputation or track record.
Concerns:
- The "contextMenus" permission allows the extension to add items to the context menu, which could potentially lead to unintended actions or phishing attempts.
- The "activeTab" permission grants access to the active tab when the extension icon is clicked, raising privacy concerns.
- The "storage" permission allows the extension to store data locally, which could be a potential security risk if sensitive information is stored insecurely.
Recommendations:
- Exercise caution when using this extension, as the lack of developer information and the permissions granted could pose potential risks.
- Consider running the extension in a separate Chrome profile or a sandboxed environment to mitigate potential risks.
- Regularly review the extension's permissions and behavior to ensure it is not engaging in any suspicious activities.
- If possible, seek alternative extensions from reputable developers with a larger user base and positive reviews.
Security Analysis
This section provides a detailed analysis of the extension's security posture, without broader context. Assumes worst-case impact.
MEDIUM
Overall Risk
Based on 3 total findings, ranked without considering overall context, including 0 high-risk and 3 medium-risk findings.
MEDIUM
Medium-Risk Permission: activeTab
This extension has the activeTab permission. Can access the active tab when clicking the extension icon.
MEDIUM
Medium-Risk Permission: contextMenus
This extension has the contextMenus permission. Can add items to the context menu.
MEDIUM
Medium-Risk Permission: storage
This extension has the storage permission. Can store data locally.
Security Analysis Details
Required Permissions:
- sidePanel
- scripting
- contextMenus
- activeTab
- storage
Embedded URLs (40 total):
| https://fonts.googleapis.com/css2?family=Poppins:wght@500 | https://chromewebstore.google.com/detail/subway-surfers-screen-rea/jcijfneifjnhbgahlokgkmpcnocgpegd | |
| https://clients2.google.com/service/update2/crx | https://registry.npmjs.org/easy-speech/-/easy-speech-2.4.0.tgz | |
| https://github.com/sponsors/jankapunkt | https://paypal.me/kuesterjan | |
| https://wicg.github.io/speech-api/#tts-section | https://developer.mozilla.org/en-US/docs/Web/API/SpeechSynthesis | |
| https://wicg.github.io/speech-api/#utterance-attributes | https://github.com/leaonline/easy-speech/blob/master/API.md | |
| https://img.shields.io/badge/code_style-standard-brightgreen.svg | https://standardjs.com | |
| https://www.repostatus.org/badges/latest/active.svg | https://www.repostatus.org/#active | |
| https://github.com/leaonline/easy-speech/actions/workflows/tests.yml/badge.svg | https://github.com/leaonline/easy-speech/actions/workflows/tests.yml | |
| https://github.com/leaonline/easy-speech/actions/workflows/codeql-analysis.yml/badge.svg | https://github.com/leaonline/easy-speech/actions/workflows/codeql-analysis.yml | |
| https://img.shields.io/npm/v/easy-speech | https://img.shields.io/bundlephobia/min/easy-speech | |
| https://img.shields.io/bundlephobia/minzip/easy-speech | https://zenodo.org/badge/432159293.svg | |
| https://zenodo.org/doi/10.5281/zenodo.10816462 | https://leaonline.github.io/easy-speech/ | |
| https://github.com/thlorenz/doctoc | https://cdn.jsdelivr.net/npm/easy-speech/+esm | |
| https://cdn.jsdelivr.net/npm/easy-speech/dist/EasySpeech.iife.js | https://gist.github.com/alrra/6741915 | |
| https://github.com/ubershmekel/audio-language-tests | https://stackoverflow.com/questions/33889107/speech-synthesis-in-chrome-for-android-not-loading-voices | |
| https://stackoverflow.com/questions/49506716/speechsynthesis-getvoices-returns-empty-array-on-windows | https://stackoverflow.com/questions/21947730/chrome-speech-synthesis-with-longer-texts | |
| https://stackoverflow.com/a/34130734 | https://stackoverflow.com/a/68060634 | |
| https://stackoverflow.com/a/48056986 | https://bugs.chromium.org/p/chromium/issues/detail?id=582455 | |
| https://stackoverflow.com/a/65883556 | https://github.com/jankapunkt/easy-speech.git | |
| https://github.com/jankapunkt/easy-speech/issues | https://github.com/jankapunkt/easy-speech#readme |
Raw Manifest
{ "name": "Sidepanel Screen Reader TTS", "icons": { "128": "images/sidepanel-screen-reader.png" }, "action": { "default_title": "Click to open panel" }, "version": "0.0.2", "background": { "type": "module", "service_worker": "scripts/service-worker.js" }, "side_panel": { "default_path": "sidePanel.html" }, "update_url": "https://clients2.google.com/service/update2/crx", "description": "AI Screen Reader/ Text to speech tool but in the side panel.", "permissions": [ "sidePanel", "scripting", "contextMenus", "activeTab", "storage" ], "manifest_version": 3 }
Secure Annex (beta)
Coming soon...