Jobclip

Version 1.4.3 View in Chrome Web Store

Last scanned: 21 days ago | force re-scan

Extension Details

Developer: jobclip.co

Rating: 4.3 ★ (96 ratings)

Users: 74

Context-Aware Verdict

HIGH

Overall Risk

Trust Factors:

The extension has a very small user base of only 74 users, which raises concerns about its legitimacy and testing. While it maintains a decent 4.3-star rating from 96 reviews, the disproportionate number of reviews compared to users is suspicious. The developer domain jobclip.co suggests it's related to job searching functionality, but the limited adoption and lack of detailed developer information reduce trustworthiness.

Concerns:

The combination of tabs and cookies permissions is particularly concerning for an extension with such limited adoption. These permissions allow comprehensive tracking of browsing behavior and manipulation of authentication data across all websites. The content scripts running on all HTTP and HTTPS sites means the extension can monitor and modify any webpage you visit. For a job-related tool, these broad permissions seem excessive and unnecessary. The use of outdated Manifest V2 indicates the extension hasn't been updated to meet modern security standards.

Recommendations:

Given the high-risk permissions and low user adoption, consider running this extension in a completely separate Chrome profile if you must use it. Better yet, look for alternative job search tools with more established reputations and appropriate permission scopes. If you proceed, regularly audit your saved passwords and logged-in accounts, as this extension has the technical capability to access sensitive authentication data across all websites.

Findings

HIGH

High-Risk Permission: cookies

This extension has the cookies permission. Can access and modify browser cookies. This could potentially be used maliciously to compromise security or privacy.

HIGH

High-Risk Permission: tabs

This extension has the tabs permission. Can access browser tab information and manipulate tabs. This could potentially be used maliciously to compromise security or privacy.

MEDIUM

Older Manifest Version

This extension uses Manifest Version 2, which has fewer security restrictions than Manifest V3. Consider using extensions that have upgraded to V3.

Security Analysis Details

Required Permissions:

tabs
cookies
http://jobclip.co/

Embedded URLs (88 total):

http://jobclip.co/	http://jobclip.co/app/board
http://jobclip.co	https://clients2.google.com/service/update2/crx
http://jobclip.co/app/applications/create?u=	http://candidat.pole-emploi.fr/candidat/rechercheoffres/detail/
http://cadres.apec.fr/offres-emploi-cadres/	http://jd.apec.fr/offres-emploi-cadres/offre_chartee_modele.aspx
http://www.nordjob.com/clients/offres_chartees/offre_chartee_modele.aspx	http://www.ouestjob.com/clients/offres_chartees/offre_chartee_modele.aspx
http://www.parisjob.com/clients/offres_chartees/offre_chartee_modele.aspx	http://www.estjob.com/clients/offres_chartees/offre_chartee_modele.aspx
http://www.centrejob.com/clients/offres_chartees/offre_chartee_modele.aspx	http://www.sudouestjob.com/clients/offres_chartees/offre_chartee_modele.aspx
http://www.rhonealpesjob.com/clients/offres_chartees/offre_chartee_modele.aspx	http://www.pacajob.com/clients/offres_chartees/offre_chartee_modele.aspx
http://www.nordjob.com/offre_emploi/detailoffre.aspx?numoffre=	http://www.ouestjob.com/offre_emploi/detailoffre.aspx?numoffre=
http://www.parisjob.com/offre_emploi/detailoffre.aspx?numoffre=	http://www.estjob.com/offre_emploi/detailoffre.aspx?numoffre=
http://www.centrejob.com/offre_emploi/detailoffre.aspx?numoffre=	http://www.sudouestjob.com/offre_emploi/detailoffre.aspx?numoffre=
http://www.rhonealpesjob.com/offre_emploi/detailoffre.aspx?numoffre=	http://www.pacajob.com/clients/offre_emploi/detailoffre.aspx?numoffre=
http://www.cadremploi.fr/emploi/detail_offre	http://www.cadresonline.com/emploi-
http://www.careerbuilder.fr/Emploi/	http://www.carriereonline.com/offre-emploi
http://www.directemploi.com/offre/	http://www.indeed.fr/voir-emploi
http://www.jobintree.com/offre-emploi/	http://www.keljob.com/offre/
http://www.meteojob.com/candidat/offres/	http://offre-emploi.monster.fr/
http://moovement.fr/offer/page/	http://www.qapa.fr/offres-d-emploi
http://www.stepstone.fr/emploi--	http://www.emploidunet.fr/emploi/
https://remixjobs.com/emploi	http://yupeek.com/offre/
http://www.leader-emploi.com/offre.php	http://www.jobculture.fr/emploi-culture/
http://fr.fashionjobs.com/emploi/	http://www.efinancialcareers.fr/emploi-
https://www.emploi.sncf.com/fr/emploi/detailAnnonce.do	http://www.distrijob.fr/candidat/offre_show.asp
http://www.emploi-environnement.com/fr/gestion_offre/visu_offre.php	http://www.emploipublic.fr/jobSearch/showOfferExt/offerId/
http://www.adecco.fr/trouver-un-emploi/Pages/Details-de-l-Offre/	http://www.pact-habitat.org/recherche_offre.php?offre=
http://emploi.lagazettedescommunes.com/jobSearch/showOfferExt/offerId/	http://www.emploi-collectivites.fr/
http://www.emploi.leem.org/detail_offre.php?ID_OFFRE=	http://www.capemploi.net/espace-candidats/offres-d-emploi/?adsEntry=
http://www.emploi86.com/candidats/detail-emploi/	http://www.talents.fr/offre-emploi/
http://www.jobteaser.com/fr/entreprises/	http://www.proman-emploi.fr/candidats/trouver-un-emploi/details/
http://emploi.leparisien.fr/offre_emploi/detailoffre.aspx?numoffre=	http://www.chooseyourboss.com/candidates/offers/
http://emploi.lesechos.fr/emploi-	http://emploi.cnrs.fr/Offres/
http://emploi.nouvelobs.com/offre_emploi/detailoffre.aspx?	http://www.manpower.fr/candidats/detail-offre-d-emploi/
http://www.lesjeudis.com/JobSeeker/Jobs/JobDetails.aspx?	http://www.pmejob.fr/offre-emploi-
https://careers.societegenerale.com/offres-d-emploi/	http://recrute.carrefour.fr/jobview/
http://talent.auchan.fr/nous-rejoindre/moteur-talent/?mode=afficheOffre&idOffre=	http://psa.profils.org/Web/Doss.aspx?
http://www.emploi.bouyguestelecom.fr/offre-de-emploi/emploi-	https://careers.total.com/front/web/guest/fiche-offre/
http://www.dutyfreepeople.com/nous-rejoindre/voiroffre?id=	http://www.wizbii.com/jobs/view/
http://www.alertejob.com/OF	http://www.linkedin.com/jobs2/view/
http://emploi.frenchweb.fr/offre-emploi/	http://emploi.presse-citron.net/job.php?
http://www.civiweb.com/FR/offre/	http://www.iquesta.com/Emploi-

Page 1 of 2

Raw Manifest

{
  "name": "Jobclip",
  "icons": {
    "128": "img/icon_128.png"
  },
  "version": "1.4.3",
  "background": {
    "page": "background.html",
    "persistent": true
  },
  "short_name": "Jobclip",
  "update_url": "https://clients2.google.com/service/update2/crx",
  "description": "Centralise vos offres d'emploi en un clic.",
  "permissions": [
    "tabs",
    "cookies",
    "http://jobclip.co/"
  ],
  "homepage_url": "http://jobclip.co/",
  "browser_action": {
    "default_icon": "img/icon_19.png",
    "default_popup": "popup.html",
    "default_title": "Enregistrer cette page"
  },
  "content_scripts": [
    {
      "js": [
        "jquery.min.js",
        "contentscript.js"
      ],
      "matches": [
        "http://*/*",
        "https://*/*"
      ]
    }
  ],
  "manifest_version": 2,
  "web_accessible_resources": [
    "logo.png",
    "loader.gif",
    "normalize.css",
    "contentscript_style.css"
  ]
}

by ✦ Astarte

Jobclip

Extension Details

Context-Aware Verdict

Findings

Security Analysis Details

Required Permissions:

Embedded URLs (88 total):

Raw Manifest

Detections

Manifest Findings