Extension Details
Context-Aware Verdict
The extension has a perfect 5.0 rating, though with only 794 users, which suggests limited but positive user feedback. The developer gameforbreak.com appears to be focused on casual gaming extensions. The extension uses Manifest V3, which is the current security standard for Chrome extensions. The minimal permission set and lack of host permissions, content scripts, or background scripts indicate a simple, contained application.
The primary concern is the storage permission, which allows the extension to store data locally on your device. While this is typically used for legitimate purposes like saving game progress and settings in a game extension, it could theoretically be misused to store unwanted data. The relatively small user base of 794 means there's less community vetting compared to more popular extensions.
This extension appears to be a straightforward game with minimal security risks. The storage permission is reasonable and expected for a game that likely needs to save progress, high scores, or user preferences. You can safely install this extension in your main Chrome profile. If you're particularly security-conscious, monitor what data the extension stores through Chrome's developer tools, but this level of caution isn't necessary for most users given the low risk profile.
Findings
Security Analysis Details
Required Permissions:
- storage
Embedded URLs (9 total):
| https://www.gameforbreak.com/game/snake-vs-bridge/ | https://clients2.google.com/service/update2/crx | |
| https://www.google-analytics.com/mp/collect | https://www.google-analytics.com/debug/mp/collect | |
| https://developers.google.com/analytics/devguides/collection/protocol/ga4/sending-events?client_type=gtag#recommended_parameters_for_reports | https://developers.google.com/analytics/devguides/collection/protocol/ga4/reference?client_type=gtag#reserved_names | |
| https://cdn.gameforbreak.com/feeds/chrome/image/ | https://chromewebstore.google.com/detail/ | |
| https://cdn.gameforbreak.com/feeds/chrome/data/pnncdeicbofogmklheappebjeaipgjfc.json |
Raw Manifest
{ "name": "Color Snake Game", "icons": { "16": "images/logo.png", "48": "images/logo.png", "128": "images/logo.png" }, "action": { "default_icon": "images/logo.png", "default_popup": "index.html" }, "version": "0.1.7", "update_url": "https://clients2.google.com/service/update2/crx", "description": "Navigate a snake that changes colors to gather items of the same color.", "permissions": [ "storage" ], "offline_enabled": true, "manifest_version": 3 }
ⓘ CRXaminer has partnered with our friends at Secure Annex to provide additional findings unique to their platform.
Secure Annex also analyzes extensions from other browsers, IDEs, and can continuously monitor.
This extension may not yet be analyzed by Secure Annex.