Starting analysis...
Version 2.0 View in Chrome Web Store
This extension has extremely limited trust indicators with only 45 users, no rating data, and missing critical information like author details and last update date. The lack of transparency around the developer and the minimal user base suggest this is either a very new or potentially abandoned extension. The connection to WordTune (a legitimate writing assistant service) cannot be verified without proper developer attribution.
The clipboardWrite permission is particularly concerning for a voice extension, as it allows the extension to modify clipboard content without user awareness, potentially replacing copied sensitive information. The broad host permissions to OpenAI's API, while functionally relevant, combined with activeTab access creates a pathway for data exfiltration. The extension could theoretically capture content from any active tab and send it to external servers. The missing author information and extremely low user count raise questions about legitimacy and ongoing maintenance.
Given the high risk level, run this extension in a separate Chrome profile isolated from sensitive browsing activities. Avoid using it on pages containing personal, financial, or confidential information. Monitor your clipboard contents after using the extension to ensure no unauthorized modifications occur. Consider waiting for the extension to gain more users and reviews, or seek established alternatives from verified developers. If you must use it, regularly review the extension's network activity and consider uninstalling if any suspicious behavior is detected.
| https://api.openai.com/v1/chat/completions | https://i.postimg.cc/qMM0hP28/New-WTHeader.png | |
| https://clients2.google.com/service/update2/crx | https://api.openai.com/ |
{ "name": "WordTune Voice Extension", "action": { "default_popup": "popup.html", "default_title": "Dictation & Translation" }, "version": "2.0", "update_url": "https://clients2.google.com/service/update2/crx", "description": "Dictate speech, translate it via OpenAI, and read selected text.", "permissions": [ "clipboardWrite", "activeTab", "scripting" ], "host_permissions": [ "https://api.openai.com/*" ], "manifest_version": 3 }
ⓘ CRXaminer has partnered with our friends at Secure Annex to provide additional findings unique to their platform.
Secure Annex also analyzes extensions from other browsers, IDEs, and can continuously monitor.
This extension may not yet be analyzed by Secure Annex.