[ new scan ] [ statistics ] [ github ] [ twitter ] [ help ]

Voice Remaker - Free AI Voice

Version 1.2.2 View in Chrome Web Store

Last scanned: about 8 hours ago

Extension Details

Rating: 4.1 ★ (101 ratings)

Users: 10,000

Context-Aware Verdict

HIGH

Overall Risk

Trust Factors: The extension has a moderate user base of 10,000 users and a decent rating of 4.1 from 101 reviews, suggesting some level of user satisfaction. However, the lack of clear developer information and company details raises transparency concerns. The AI voice functionality described appears legitimate for the stated purpose.

Concerns: The extension exhibits several red flags that justify the high-risk classification. The combination of downloads permission with broad content script injection across all websites creates significant security exposure. The tabs permission allows extensive browser manipulation beyond what's typically needed for voice processing. Most concerning is the ability to inject scripts into every website you visit, which could enable data harvesting, credential theft, or malicious content modification. The storage permission, while common, adds to the overall risk profile when combined with these other capabilities.

Recommendations: Consider running this extension in a separate Chrome profile to isolate potential risks from your main browsing activities. Before installation, verify the developer's identity and reputation through independent sources. Monitor your download folder for unexpected files and review browser tab behavior for unusual activity. Consider alternative voice processing tools that operate with more restricted permissions or as standalone applications. If you must use this extension, disable it when not actively needed and avoid using it on sensitive websites containing personal or financial information.

Findings

HIGH

Broad Content Script Injection

This extension can inject scripts into any website. This means it could potentially read sensitive data, modify website content, or steal credentials.

HIGH

High-Risk Permission: downloads

This extension has the downloads permission. Can download files and access download history. This could potentially be used maliciously to compromise security or privacy.

HIGH

High-Risk Permission: tabs

This extension has the tabs permission. Can access browser tab information and manipulate tabs. This could potentially be used maliciously to compromise security or privacy.

MEDIUM

Medium-Risk Permission: activeTab

This extension has the activeTab permission. Can access the active tab when clicking the extension icon.

MEDIUM

Medium-Risk Permission: storage

This extension has the storage permission. Can store data locally.

Security Analysis Details

Required Permissions:

storage
downloads
activeTab
tabs

Content Security Policy:

extension_pages: script-src 'self'; object-src 'self'

Embedded URLs (13 total):

http://www.w3.org/2000/svg	https://vuejs.org/error-reference/#runtime-
http://www.w3.org/1998/Math/MathML	http://www.w3.org/1999/xlink
https://vchanger.ai/api/v1/ai-text-to-audio/audio	https://github.com/uuidjs/uuid#getrandomvalues-not-supported
https://chromewebstore.google.com/detail/voice-remaker-free-ai-voi/pnlgifbohdiadfjllfmmjadcgofbnpoi/reviews	https://cdn.aivocal.io/aivocal/static/logo/logo.png
https://docs.google.com/forms/d/e/1FAIpQLSetd7pvtYIof-ZihUC1Ltpz6-O2faZGn6q_XMVnp3ohYwxWYA/viewform?usp=header	https://discord.gg/Hz7W34mmep
https://aivocal.io	https://clients2.google.com/service/update2/crx
https://aivocal.io/

Raw Manifest

{
  "name": "__MSG_extName__",
  "icons": {
    "16": "icons/16x16.png",
    "32": "icons/32x32.png",
    "48": "icons/48x48.png",
    "128": "icons/128x128.png"
  },
  "action": {
    "default_icon": {
      "16": "icons/16x16.png",
      "32": "icons/32x32.png",
      "48": "icons/48x48.png",
      "128": "icons/128x128.png"
    },
    "default_popup": "index.html",
    "default_title": "__MSG_extName__"
  },
  "version": "1.2.2",
  "background": {
    "service_worker": "background.js"
  },
  "update_url": "https://clients2.google.com/service/update2/crx",
  "description": "__MSG_extDesc__",
  "permissions": [
    "storage",
    "downloads",
    "activeTab",
    "tabs"
  ],
  "homepage_url": "https://aivocal.io/",
  "default_locale": "en",
  "content_scripts": [
    {
      "js": [
        "content-script.js"
      ],
      "css": [
        "content-script.css"
      ],
      "matches": [
        "<all_urls>"
      ]
    }
  ],
  "manifest_version": 3,
  "content_security_policy": {
    "extension_pages": "script-src 'self'; object-src 'self'"
  }
}

by ✦ Astarte

Voice Remaker - Free AI Voice

Extension Details

Context-Aware Verdict

Findings

Security Analysis Details

Required Permissions:

Content Security Policy:

Embedded URLs (13 total):

Raw Manifest

Detections

Manifest Findings