IMDb & Rotten Tomatoes @ Prime Instant Video
Version 0.0.5 View in Chrome Web Store
Last scanned: about 12 hours ago
Extension Details
Rating:
2.1 ★
(9 ratings)
Users:
493
Context-Aware Verdict
This section provides a Claude-based AI analysis that applies additional context to the risk. Results are not guaranteed to be accurate.
MEDIUM
Risk Level
Trust Factors:
- The extension has a relatively low number of users (493), which could indicate a lack of widespread adoption and trust.
- The extension has a low rating of 2.1 out of 5, which raises some concerns about its quality and trustworthiness.
- The lack of developer information or a reputable company associated with the extension makes it difficult to assess its trustworthiness.
Concerns:
- The extension requests broad permissions to access all content on Amazon's websites (*://www.amazon.com/*, *://www.amazon.de/*, *://www.amazon.co.uk/*), which may be unnecessary for its stated purpose of displaying IMDb and Rotten Tomatoes ratings.
- The extension uses an older Manifest Version (2), which has fewer security restrictions than the newer Manifest Version 3.
Recommendations:
- Consider using an alternative extension from a more reputable source or with a higher rating and more users, as this extension's low rating and lack of developer information raise trust concerns.
- If you decide to use this extension, it is recommended to run it in a separate Chrome profile or a sandboxed environment to minimize potential risks.
- Monitor the extension's behavior and permissions closely, and remove it if it exhibits any suspicious or unwanted behavior.
- Keep an eye out for updates that migrate the extension to Manifest Version 3, which has improved security features.
Security Analysis
This section provides a detailed analysis of the extension's security posture, without broader context. Assumes worst-case impact.
LOW
Overall Risk
Based on 1 total findings, ranked without considering overall context, including 0 high-risk and 1 medium-risk findings.
MEDIUM
Older Manifest Version
This extension uses Manifest Version 2, which has fewer security restrictions than Manifest V3. Consider using extensions that have upgraded to V3.
Security Analysis Details
Required Permissions:
- *://www.amazon.com/*
- *://www.amazon.de/*
- *://www.amazon.co.uk/*
Embedded URLs (12 total):
| https://www.omdbapi.com/ | https://clients2.google.com/service/update2/crx | |
| http://www.inkscape.org/ | http://purl.org/dc/elements/1.1/ | |
| http://creativecommons.org/ns# | http://www.w3.org/1999/02/22-rdf-syntax-ns# | |
| http://www.w3.org/2000/svg | http://sodipodi.sourceforge.net/DTD/sodipodi-0.dtd | |
| http://www.inkscape.org/namespaces/inkscape | http://purl.org/dc/dcmitype/StillImage | |
| http://stackoverflow.com/questions/3219758/detect-changes-in-the-dom | http://stackoverflow.com/questions/4292320 |
Raw Manifest
{ "name": "__MSG_appName__", "icons": { "16": "shared/icons/icon16.png", "48": "shared/icons/icon48.png", "128": "shared/icons/icon128.png" }, "version": "0.0.5", "short_name": "__MSG_appShortName__", "update_url": "https://clients2.google.com/service/update2/crx", "description": "__MSG_appDesc__", "permissions": [ "*://www.amazon.com/*", "*://www.amazon.de/*", "*://www.amazon.co.uk/*" ], "default_locale": "en", "content_scripts": [ { "js": [ "components/jquery.min.js", "chrome.js", "shared/inject.js" ], "css": [ "chrome.css", "shared/inject.css" ], "run_at": "document_end", "matches": [ "*://www.amazon.com/*", "*://www.amazon.de/*", "*://www.amazon.co.uk/*" ] } ], "manifest_version": 2, "web_accessible_resources": [ "shared/inject.css" ] }
Secure Annex (beta)
Coming soon...