CRX aminer
Extension icon

Simplify Gmail

Version 3.4.2 View in Chrome Web Store

Last scanned: about 6 hours ago

Extension Details

Developer: simpl.fyi
Rating: 4.5 ★ (624 ratings)
Users: 30,000

Context-Aware Verdict

MEDIUM
Overall Risk
Trust Factors:

The extension has a solid user base of 30,000 users with a strong 4.5-star rating from 624 reviews, indicating generally positive user experiences. The name "Simplify Gmail" clearly indicates its purpose, and the developer domain "simpl.fyi" appears to be dedicated to this specific functionality. The extension uses Manifest V3, which provides better security controls than older versions.

Concerns:

The primary concern is the broad host permissions that extend beyond just Gmail to include all Google user content domains (googleusercontent.com), which could potentially access more data than necessary for Gmail simplification. While the storage permission is standard for extensions that need to save user preferences, it does allow local data storage. The content script injection into Gmail pages means the extension can modify and access all Gmail content, including potentially sensitive email data.

Recommendations:

Given the medium risk level and the extension's specific Gmail functionality, the risk appears proportionate to its stated purpose. The permissions align with what would be expected for a Gmail enhancement tool. Users should ensure they trust the developer with access to their Gmail data. If you're particularly security-conscious, consider running this extension in a separate Chrome profile dedicated to Gmail use only. Monitor for any unusual behavior or unexpected data requests, and regularly review the extension's continued necessity for your workflow.

Findings

HIGH
Broad Host Permissions
This extension has broad host permissions allowing it to access many or all websites. This could potentially be used to steal sensitive data or track browsing activity.
MEDIUM
Access to Sensitive Domains
This extension requests access to sensitive domains: https://mail.google.com/*, https://*.googleusercontent.com/*. Ensure you trust this extension with access to these sites.
MEDIUM
Medium-Risk Permission: storage
This extension has the storage permission. Can store data locally.