Extension Details
Context-Aware Verdict
The extension has a strong user rating of 4.9 stars from 898 reviews and 8,000 users, indicating positive user experiences. The developer nanoinfluencer.ai appears to be a legitimate business focused on influencer marketing tools. The extension uses Manifest V3, which provides better security controls than older versions.
The extension's content scripts run on YouTube.com and the developer's own domains (nanoinfluencer.co and nanoinfluencer.ai), which is appropriate for its stated purpose of finding email contacts for YouTube creators. However, the lack of a clear description raises questions about exactly what data is being collected and how it's processed. The storage permission allows the extension to retain data locally, which could include sensitive contact information. The activeTab permission provides access to the current tab's content when activated, which is necessary for the tool's functionality but should be used responsibly.
This extension appears to be a legitimate business tool with reasonable permissions for its purpose. Users should ensure they understand what data is being collected and stored. Consider reviewing the developer's privacy policy before use. If you're concerned about data privacy, you could run this extension in a separate Chrome profile dedicated to business activities. The extension seems appropriate for its intended use case of finding contact information for YouTube influencers.
Findings
Security Analysis Details
Required Permissions:
- storage
- activeTab
- sidePanel
Optional Permissions:
- tabs
Embedded URLs (96 total):
| http://www.w3.org/2000/svg | http://www.w3.org/1999/xlink | |
| https://api2.amplitude.com/2/httpapi | https://api.eu.amplitude.com/2/httpapi | |
| https://api2.amplitude.com/batch | https://api.eu.amplitude.com/batch | |
| https://mozilla.github.io/localForage/#definedriver | https://circumicons.com/ | |
| https://github.com/Klarr-Agency/Circum-Icons/blob/main/LICENSE | https://fontawesome.com/ | |
| https://creativecommons.org/licenses/by/4.0/ | https://ionicons.com/ | |
| https://github.com/ionic-team/ionicons/blob/master/LICENSE | http://google.github.io/material-design-icons/ | |
| https://github.com/google/material-design-icons/blob/master/LICENSE | http://s-ings.com/typicons/ | |
| https://creativecommons.org/licenses/by-sa/3.0/ | https://octicons.github.com/ | |
| https://github.com/primer/octicons/blob/master/LICENSE | https://feathericons.com/ | |
| https://github.com/feathericons/feather/blob/master/LICENSE | https://lucide.dev/ | |
| https://github.com/lucide-icons/lucide/blob/main/LICENSE | https://game-icons.net/ | |
| https://creativecommons.org/licenses/by/3.0/ | https://erikflowers.github.io/weather-icons/ | |
| http://scripts.sil.org/OFL | https://vorillaz.github.io/devicons/ | |
| https://opensource.org/licenses/MIT | https://github.com/ant-design/ant-design-icons | |
| https://github.com/twbs/icons | https://github.com/Remix-Design/RemixIcon | |
| http://www.apache.org/licenses/ | https://github.com/icons8/flat-color-icons | |
| https://github.com/grommet/grommet-icons | https://github.com/tailwindlabs/heroicons | |
| https://simpleicons.org/ | https://creativecommons.org/publicdomain/zero/1.0/ | |
| https://thesabbir.github.io/simple-line-icons/ | https://github.com/Keyamoon/IcoMoon-Free | |
| https://github.com/Keyamoon/IcoMoon-Free/blob/master/License.txt | https://github.com/atisawd/boxicons | |
| https://github.com/atisawd/boxicons/blob/master/LICENSE | https://github.com/astrit/css.gg | |
| https://github.com/microsoft/vscode-codicons | https://github.com/tabler/tabler-icons | |
| https://github.com/lykmapipo/themify-icons | https://github.com/thecreation/standard-icons/blob/master/modules/themify-icons/LICENSE | |
| https://icons.radix-ui.com | https://github.com/radix-ui/icons/blob/master/LICENSE | |
| https://github.com/phosphor-icons/core | https://github.com/phosphor-icons/core/blob/main/LICENSE | |
| https://icons8.com/line-awesome | https://github.com/icons8/line-awesome/blob/master/LICENSE.md | |
| https://discord.gg/764qRmCM6w | https://www.nanoinfluencer.ai | |
| https://www2.nanoinfluencer.ai | https://www.youtube.com/watch?v= | |
| https://www.youtube.com/channel/ | https://www.youtube.com/ | |
| https://www.youtube.com/channel/U | https://api.nanoinfluencer.ai/nano-api/search/task/ | |
| https://lh3.googleusercontent.com/a/ACg8ocKyxtRQdhSKFUZr8UJJmU0CHENqxYDPlyJnqfScNL_nzA=s96-c | http://momentjs.com/guides/#/warnings/define-locale/ | |
| http://momentjs.com/guides/#/warnings/js-date/ | http://momentjs.com/guides/#/warnings/min-max/ | |
| http://momentjs.com/guides/#/warnings/add-inverted-param/ | http://momentjs.com/guides/#/warnings/zone/ | |
| http://momentjs.com/guides/#/warnings/dst-shifted/ | https://chromewebstore.google.com/detail/ | |
| https://mui.com/production-error/?code= | https://github.com/theKashey/focus-lock/#focus-fighting | |
| https://github.com/mobxjs/mobx/blob/main/packages/mobx/src/errors.ts | http://fb.me/use-check-prop-types | |
| https://reactjs.org/docs/error-decoder.html?invariant= | http://www.w3.org/XML/1998/namespace | |
| http://www.w3.org/1998/Math/MathML | http://www.w3.org/1999/xhtml | |
| http://www.w3.org/2000/xmlns/ | http://www.youtube.com/channel/ |
Raw Manifest
{ "name": "__MSG_YTB_APP_NAME__", "icons": { "16": "img/icon.png", "48": "img/icon.png", "128": "img/icon.png" }, "action": { "default_icon": "img/icon.png", "default_title": "__MSG_YTB_APP_NAME__" }, "config": { "app-id": "pmafjeghchhihekeniifdnagkiagijbn", "platform": "ytb" }, "version": "0.9.0", "background": { "service_worker": "js/background.js" }, "side_panel": { "default_path": "sidebar.html" }, "update_url": "https://clients2.google.com/service/update2/crx", "description": "__MSG_YTB_APP_DESC__", "permissions": [ "storage", "activeTab", "sidePanel" ], "homepage_url": "https://nanoinfluencer.ai", "default_locale": "en", "content_scripts": [ { "js": [ "js/jquery-3.6.4.min.js", "js/content-scripts.js" ], "css": [ "css/style.css" ], "run_at": "document_end", "matches": [ "*://*.nanoinfluencer.co/*", "*://*.nanoinfluencer.ai/*", "*://www.youtube.com/*" ], "all_frames": true, "match_origin_as_fallback": true } ], "manifest_version": 3, "optional_permissions": [ "tabs" ], "externally_connectable": { "matches": [ "*://*.nanoinfluencer.co/*", "*://*.nanoinfluencer.ai/*", "https://env.nanoinfluencer.ai/pro" ] }, "web_accessible_resources": [ { "matches": [ "*://www.youtube.com/*" ], "resources": [ "sidebar.html", "js/inject.js" ], "extension_ids": [] } ] }
ⓘ CRXaminer has partnered with our friends at Secure Annex to provide additional findings unique to their platform.
Secure Annex also analyzes extensions from other browsers, IDEs, and can continuously monitor.
This extension may not yet be analyzed by Secure Annex.