CRX aminer

Starting analysis...

Extension icon

Sendspark Video and Screen Recorder

Version 2.2.8 View in Chrome Web Store

Last scanned: about 1 month ago | force re-scan

Extension Details

Developer: sendspark.com
Rating: 4.9 ★ (775 ratings)
Users: 10,000

Context-Aware Verdict

CRITICAL
Overall Risk
Trust Factors:

The extension has a strong user base with 10,000 users and an excellent 4.9-star rating from 775 reviews, indicating positive user experiences. It's developed by sendspark.com, which appears to be a legitimate video messaging platform. The extension's purpose as a video and screen recorder aligns with its requested permissions for desktop and tab capture functionality.

Concerns:

The extension requests extremely broad permissions that extend far beyond basic screen recording needs. The universal host permissions (*://*/*) combined with content script injection capabilities create significant privacy and security risks. Access to cookies and tabs permissions could enable data harvesting across all websites. The unsafe WebAssembly execution policy is particularly concerning as it could hide malicious code. The extension targets numerous business platforms (Gmail, LinkedIn, Salesforce, HubSpot, etc.) which handle sensitive professional data.

Recommendations:

Given the critical risk level, consider running this extension in a completely separate Chrome profile dedicated solely to video recording activities. Before installation, verify the extension is actually needed for your workflow and consider alternative screen recording tools with more limited permissions. If you must use it, regularly audit what data the extension might be accessing and consider temporarily disabling it when not actively recording. Monitor your accounts on the business platforms this extension accesses for any unusual activity.

Findings

HIGH
Broad Content Script Injection
This extension can inject scripts into any website. This means it could potentially read sensitive data, modify website content, or steal credentials.
HIGH
Broad Host Permissions
This extension has broad host permissions allowing it to access many or all websites. This could potentially be used to steal sensitive data or track browsing activity.
HIGH
High-Risk Permission: cookies
This extension has the cookies permission. Can access and modify browser cookies. This could potentially be used maliciously to compromise security or privacy.
HIGH
High-Risk Permission: tabs
This extension has the tabs permission. Can access browser tab information and manipulate tabs. This could potentially be used maliciously to compromise security or privacy.
HIGH
Unsafe WebAssembly Execution
This extension's Content Security Policy allows 'wasm-unsafe-eval', which permits potentially dangerous WebAssembly code execution. This could be used to hide malicious code or perform CPU-intensive operations.
MEDIUM
Access to Sensitive Domains
This extension requests access to sensitive domains: https://mail.google.com/. Ensure you trust this extension with access to these sites.
MEDIUM
Medium-Risk Permission: notifications
This extension has the notifications permission. Can show notifications.
MEDIUM
Medium-Risk Permission: storage
This extension has the storage permission. Can store data locally.