[ new scan ] [ statistics ] [ github ] [ twitter ] [ help ]

Echoes-ChatGPT, Claude & Gemini Tool for Search, Label, Export & Summarize

Version 8.0.6 View in Chrome Web Store

Last scanned: about 5 hours ago

Extension Details

Developer: https://echoes.r2bits.com/

Rating: 4.0 ★ (250 ratings)

Users: 10,000

Context-Aware Verdict

HIGH

Overall Risk

Based on 6 total findings, including 2 high-risk findings.

Findings

HIGH

Broad Host Permissions

This extension has broad host permissions allowing it to access many or all websites. This could potentially be used to steal sensitive data or track browsing activity.

HIGH

High-Risk Permission: cookies

This extension has the cookies permission. Can access and modify browser cookies. This could potentially be used maliciously to compromise security or privacy.

MEDIUM

Access to Sensitive Domains

This extension requests access to sensitive domains: https://gemini.google.com/*, https://aistudio.google.com/*, https://alkalimakersuite-pa.clients6.google.com/*, https://www.google-analytics.com/*. Ensure you trust this extension with access to these sites.

MEDIUM

Medium-Risk Permission: activeTab

This extension has the activeTab permission. Can access the active tab when clicking the extension icon.

MEDIUM

Medium-Risk Permission: notifications

This extension has the notifications permission. Can show notifications.

MEDIUM

Medium-Risk Permission: storage

This extension has the storage permission. Can store data locally.

Security Analysis Details

Required Permissions:

scripting
activeTab
storage
cookies
notifications
declarativeNetRequest
alarms

Host Permissions:

https://chat.deepseek.com/*
https://gemini.google.com/*
https://claude.ai/*
https://chat.openai.com/*
https://chatgpt.com/*
https://grok.com/*
https://www.perplexity.ai/*
https://aistudio.google.com/*
https://alkalimakersuite-pa.clients6.google.com/*
https://chatgpt-conversation-search.firebaseapp.com/*
https://vercel-r2bits.vercel.app/*
https://www.google-analytics.com/*

Embedded URLs (129 total):

https://clients2.google.com/service/update2/crx	http://127.0.0.1:5004/auth-callback.html
https://chatgpt-conversation-search.firebaseapp.com/auth-callback.html	https://echoes-dev-8be6a.firebaseapp.com/auth-callback.html
https://echoes-dev-8be6a.web.app/auth-callback.html	https://chat.deepseek.com/
https://gemini.google.com/	https://claude.ai/
https://chat.openai.com/	https://chatgpt.com/
https://grok.com/	https://www.perplexity.ai/
https://aistudio.google.com/	https://echoes.r2bits.com
https://alkalimakersuite-pa.clients6.google.com/	https://chatgpt-conversation-search.firebaseapp.com/
https://vercel-r2bits.vercel.app/	https://www.google-analytics.com/
http://127.0.0.1:5004/	https://echoes-dev-8be6a.firebaseapp.com/
https://echoes-dev-8be6a.web.app/	http://www.w3.org/2000/svg
https://tinyurl.com/y2uuvskb	http://bit.ly/2kdckMn
https://sentry.io/welcome/	http://www.example.com
https://browser.sentry-cdn.com	https://docs.sentry.io/platforms/javascript/best-practices/browser-extensions/
https://spotlightjs.com/sidecar/npx/	https://o447951.ingest.sentry.io/api/4509632503087104/envelope/?sentry_version=7&sentry_key=c1dfb07d783ad5325c245c1fd3725390&sentry_client=sentry.javascript.browser%2F1.33.7
https://chevrotain.io/docs/guide/resolving_lexer_errors.html#MISSING_LINE_TERM_CHARS	https://chevrotain.io/docs/guide/resolving_lexer_errors.html#IDENTIFY_TERMINATOR
https://chevrotain.io/docs/guide/resolving_lexer_errors.html#CUSTOM_LINE_BREAK	https://chevrotain.io/docs/guide/resolving_lexer_errors.html#LINE_BREAKS
https://chevrotain.io/docs/guide/resolving_lexer_errors.html#ANCHORS	https://chevrotain.io/docs/guide/resolving_lexer_errors.html#UNREACHABLE
https://chevrotain.io/docs/guide/resolving_lexer_errors.html#UNICODE_OPTIMIZE	https://chevrotain.io/docs/guide/resolving_lexer_errors.html#COMPLEMENT
https://chevrotain.io/docs/guide/resolving_lexer_errors.html#REGEXP_PARSING	https://github.com/chevrotain/chevrotain/issues
https://chevrotain.io/docs/guide/resolving_lexer_errors.html#CUSTOM_OPTIMIZE	https://github.com/chevrotain/chevrotain/issues/564#issuecomment-349062346
https://chevrotain.io/docs/FAQ.html#NUMERICAL_SUFFIXES	https://chevrotain.io/docs/guide/resolving_grammar_errors.html#COMMON_PREFIX
https://chevrotain.io/docs/guide/resolving_grammar_errors.html#AMBIGUOUS_ALTERNATIVES	https://en.wikipedia.org/wiki/LL_parser#Left_factoring.
https://chevrotain.io/docs/changes/BREAKING_CHANGES.html#_6-0-0	https://chevrotain.io/docs/changes/BREAKING_CHANGES.html#_4-0-0
https://chevrotain.io/docs/guide/internals.html#grammar-recording	https://chevrotain.io/docs/guide/resolving_grammar_errors.html#IGNORING_AMBIGUITIES
https://unpkg.com/chevrotain@	https://chevrotain.io/docs/changes/BREAKING_CHANGES.html#_7-0-0
https://reactjs.org/docs/error-decoder.html?invariant=	http://www.w3.org/1999/xlink
http://www.w3.org/XML/1998/namespace	http://www.w3.org/1998/Math/MathML
http://www.w3.org/1999/xhtml	https://images.squarespace-cdn.com/content/v1/6493af4741c13939d335f0b8/269de6c0-cddc-404d-b9d5-c017f410d895/MINI_ECHOES_LOGO_NORMAL_SMALL-5-14.png?format=300w
https://github.com/markedjs/marked.	https://aistudio.google.com
https://shop.r2bits.com?utm_source=chrome_extension&utm_medium=button_click&utm_campaign=account_upgrade&utm_content=main_cta_button	https://chatgpt-conversation-search.web.app/uninstall
https://echoes.r2bits.com/features#advanced-search	https://echoes.r2bits.com/features#cross-llm
https://echoes.r2bits.com/features#sort	https://echoes.r2bits.com/features#summarize-conversations
https://echoes.r2bits.com/features#favorites-management	https://echoes.r2bits.com/features#time-account-filters
https://echoes.r2bits.com/features#export-import	https://echoes.r2bits.com/#pricing
https://echoes.r2bits.com/#multi-delete	https://echoes.r2bits.com/#unlimited-labels
https://echoes.r2bits.com/features	https://echoes.r2bits.com/#archive
https://echoes.r2bits.com/#memberships	https://www.maisieai.com/help/how-to-get-an-openai-api-key-for-chatgpt
https://2b2dc1ef39c0ba37fc494d173ac95d14@o4509599243108352.ingest.us.sentry.io/4510006410739712	http://www.apache.org/licenses/LICENSE-2.0
https://securetoken.google.com/	https://stackoverflow.com/q/56496296/110915

Page 1 of 2

Raw Manifest

{
  "name": "Echoes-ChatGPT, Claude & Gemini Tool for Search, Label, Export & Summarize",
  "icons": {
    "16": "icon16.plasmo.6c567d50.png",
    "32": "icon32.plasmo.76b92899.png",
    "48": "icon48.plasmo.aced7582.png",
    "64": "icon64.plasmo.8bb5e6e0.png",
    "128": "icon128.plasmo.3c1ed2d2.png"
  },
  "action": {
    "default_icon": {
      "16": "icon16.plasmo.6c567d50.png",
      "32": "icon32.plasmo.76b92899.png",
      "48": "icon48.plasmo.aced7582.png",
      "64": "icon64.plasmo.8bb5e6e0.png",
      "128": "icon128.plasmo.3c1ed2d2.png"
    },
    "default_popup": "popup.html"
  },
  "author": "R2bits",
  "version": "8.0.6",
  "commands": {
    "_execute_action": {
      "suggested_key": {
        "mac": "MacCtrl+Shift+E",
        "default": "Ctrl+Shift+E"
      }
    }
  },
  "background": {
    "service_worker": "static/background/index.js"
  },
  "short_name": "Echoes",
  "update_url": "https://clients2.google.com/service/update2/crx",
  "description": "Advanced AI organizer for ChatGPT, Claude, Gemini, Grok & more. Search, label, export conversations with bulk actions.",
  "permissions": [
    "scripting",
    "activeTab",
    "storage",
    "cookies",
    "notifications",
    "declarativeNetRequest",
    "alarms"
  ],
  "homepage_url": "https://echoes.r2bits.com",
  "content_scripts": [
    {
      "js": [
        "auth-callback.8307871a.js"
      ],
      "css": [],
      "run_at": "document_start",
      "matches": [
        "http://127.0.0.1:5004/auth-callback.html*",
        "http://localhost:5004/auth-callback.html*",
        "https://chatgpt-conversation-search.firebaseapp.com/auth-callback.html*",
        "https://echoes-dev-8be6a.firebaseapp.com/auth-callback.html*",
        "https://echoes-dev-8be6a.web.app/auth-callback.html*"
      ],
      "all_frames": false
    },
    {
      "js": [
        "ChatContent.d25629a0.js"
      ],
      "css": [],
      "run_at": "document_end",
      "matches": [
        "https://chat.deepseek.com/*",
        "https://gemini.google.com/*",
        "https://claude.ai/*",
        "https://chat.openai.com/*",
        "https://chatgpt.com/*",
        "https://grok.com/*",
        "https://www.perplexity.ai/*",
        "https://aistudio.google.com/*"
      ],
      "all_frames": true
    }
  ],
  "host_permissions": [
    "https://chat.deepseek.com/*",
    "https://gemini.google.com/*",
    "https://claude.ai/*",
    "https://chat.openai.com/*",
    "https://chatgpt.com/*",
    "https://grok.com/*",
    "https://www.perplexity.ai/*",
    "https://aistudio.google.com/*",
    "https://alkalimakersuite-pa.clients6.google.com/*",
    "https://chatgpt-conversation-search.firebaseapp.com/*",
    "https://vercel-r2bits.vercel.app/*",
    "https://www.google-analytics.com/*"
  ],
  "manifest_version": 3,
  "web_accessible_resources": [
    {
      "matches": [
        "http://127.0.0.1:5004/*",
        "http://localhost:5004/*",
        "https://chatgpt-conversation-search.firebaseapp.com/*",
        "https://echoes-dev-8be6a.firebaseapp.com/*",
        "https://echoes-dev-8be6a.web.app/*"
      ],
      "resources": [
        "tabs/dashboard.93a5d608.png"
      ]
    },
    {
      "matches": [
        "https://chat.deepseek.com/*",
        "https://gemini.google.com/*",
        "https://claude.ai/*",
        "https://chat.openai.com/*",
        "https://chatgpt.com/*",
        "https://grok.com/*",
        "https://www.perplexity.ai/*",
        "https://aistudio.google.com/*"
      ],
      "resources": [
        "SearchIndexWorker.cf39519c.js",
        "icon.aa6c73f1.png",
        "logo.0813bfd4.png",
        "logo-black.73c02bb8.png",
        "ChatContent.331136fa.css",
        "tabs/dashboard.93a5d608.png"
      ]
    }
  ]
}

by ✦ Astarte

Echoes-ChatGPT, Claude & Gemini Tool for Search, Label, Export & Summarize

Extension Details

Context-Aware Verdict

Findings

Security Analysis Details

Required Permissions:

Host Permissions:

Embedded URLs (129 total):

Raw Manifest

Detections

Manifest Findings