Version 4.12.0.0 View in Chrome Web Store
Calendly is a well-established, legitimate company with a widely-used scheduling platform. The extension has 700,000 users and a solid 4.3-star rating, indicating general user satisfaction. The developer is clearly identified as Calendly LLC, which adds credibility. The extension serves a legitimate business purpose for meeting scheduling integration.
The extension's broad permissions are concerning given its stated purpose. The <all_urls> host permissions and content script injection capabilities allow access to every website you visit, which is excessive for a scheduling tool. While some specific integrations (Gmail, Google Calendar, LinkedIn) make sense for scheduling functionality, the unlimited web access creates significant privacy and security risks. The unlimitedStorage permission could allow extensive data collection and storage without user awareness.
Consider using Calendly's web interface directly instead of the extension when possible. If you must use the extension, install it in a separate Chrome profile dedicated to work activities to limit exposure of personal browsing. Regularly review what data the extension has access to through Chrome's privacy settings. Monitor for any unusual behavior or unexpected website modifications. Given Calendly's legitimate business model, the risk is primarily from potential data collection rather than malicious intent, but the broad permissions still warrant caution.
| https://mail.google.com/ | https://calendar.google.com/ | |
| https://www.linkedin.com/ | https://chrome.google.com | |
| https://addons.mozilla.org | https://github.com/zloirock/core-js#babel | |
| https://clients2.google.com/service/update2/crx | https://clients-assets.calendly.com/ | |
| https://clients-assets-staging.calendly.com/ | https://github.com/calendly/calendly/blob/a385834a28e7a2c422bf610152e25224c72c9ef7/apps/publisher/src/javascripts/components/booking_preview/selectors.js#L66 | |
| https://help.calendly.com/hc/en-us/articles/21652725311383-How-to-use-Calendly-AI-Notetaker | https://calendly.com/integrations | |
| https://github.com/jaredpalmer/formik/blob/main/packages/formik/src/Field.tsx#L212 | https://github.com/jaredpalmer/formik/issues/2425 | |
| https://github.com/calendly/calendly/blob/192b3c7d74352fe0174bb2c978801f7aa7cb00e1/apps/publisher/src/javascripts/components/event_type_edit/duration/duration.js#L25-L37 | https://github.com/facebook/react/issues/17157 | |
| https://goo.gl/forms/HrdmBP9ZQrFUdUvJ3 | https://help.calendly.com/hc/en-us/articles/18890445768087-Browser-Extensions | |
| https://forms.gle/jGMyPh2nHfV5nDQ4A | https://help.calendly.com/hc/en-us/articles/115003807154 | |
| https://forms.gle/tCxf1RbnwpFdua1d9 | https://www.figma.com/file/33I7enqFeipoyYGoM4NWZC/Client-Sidebar-update?type=design&node-id=809-17624&mode=design&t=ktI0XgxJvcp4LJYH-0 | |
| https://clients-assets.calendly.com/clients/auth.html | https://clients-assets-staging.calendly.com/clients/auth.html | |
| https://apps.apple.com/app/apple-store/id1451094657?pt=118425599&mt=8&ct=ext_welcome&utm_source=calendly&utm_medium=ext_welcome&utm_campaign=ext_welcome&utm_content=ios&utm_term=ios | https://play.google.com/store/apps/details?id=com.calendly.app&hl=en_US&gl=US&utm_source=calendly&utm_medium=ext_welcome&utm_campaign=ext_welcome&utm_content=android&utm_term=android | |
| http://www.w3.org/2000/svg | http://www.w3.org/1999/xlink | |
| https://assets.calendly.com/assets/external/close-icon.svg | http://fusejs.io | |
| http://kiro.me | http://www.apache.org/licenses/LICENSE-2.0 | |
| https://github.com/lodash/lodash/blob/master/.internal/baseToString.js | https://github.com/lodash/lodash/blob/master/isBoolean.js | |
| https://github.com/lodash/lodash/blob/master/.internal/getTag.js | https://fusejs.io/concepts/scoring-theory.html#fuzziness-score | |
| https://fusejs.io/concepts/scoring-theory.html#field-length-norm | https://github.com/catamphetamine/libphonenumber-js/issues/239 | |
| https://stackoverflow.com/a/46971044/970769 | https://github.com/Microsoft/TypeScript-wiki/blob/main/Breaking-Changes.md#extending-built-ins-like-error-array-and-map-may-no-longer-work | |
| https://github.com/substack/semver-compare/blob/master/index.js | https://github.com/catamphetamine/libphonenumber-js/issues/381 | |
| https://gitlab.com/catamphetamine/libphonenumber-js/blob/master/METADATA.md | https://github.com/google/libphonenumber/blob/55b2646ec9393f4d3d6661b9c82ef9e258e8b829/javascript/i18n/phonenumbers/phonenumberutil.js#L759-L766 | |
| https://gitlab.com/catamphetamine/input-format | https://github.com/catamphetamine/react-phone-number-input/issues/437 | |
| https://github.com/googlei18n/libphonenumber/blob/3ea547d4fbaa2d0b67588904dfa5d3f2557c27ff/javascript/i18n/phonenumbers/phonenumberutil.js#L2835 | https://github.com/googlei18n/libphonenumber/blob/master/FAQ.md#when-should-i-use-isvalidnumberforregion | |
| https://en.wikipedia.org/wiki/North_American_Numbering_Plan | https://www.ietf.org/rfc/rfc3966.txt | |
| https://github.com/googlei18n/libphonenumber/commits/master/javascript/i18n/phonenumbers/phonenumberutil.js | https://github.com/google/libphonenumber/blob/32719cf74e68796788d1ca45abc85dcdc63ba5b9/java/libphonenumber/src/com/google/i18n/phonenumbers/PhoneNumberUtil.java#L1546 | |
| http://www.petitfute.com/voyage/225-info-pratiques-reunion | https://gitlab.com/catamphetamine/libphonenumber-js/-/blob/master/METADATA.md#national_prefix_for_parsing--national_prefix_transform_rule | |
| http://ucken.blogspot.ru/2016/03/trunk-prefixes-in-skype4b.html | https://github.com/catamphetamine/libphonenumber-js/issues/127 | |
| https://github.com/google/libphonenumber/blob/876268eb1ad6cdc1b7b5bef17fc5e43052702d57/java/libphonenumber/src/com/google/i18n/phonenumbers/PhoneNumberUtil.java#L3236-L3250 | https://github.com/google/libphonenumber/blob/e326fa1fc4283bb05eb35cb3c15c18f98a31af33/java/libphonenumber/src/com/google/i18n/phonenumbers/PhoneNumberUtil.java#L2969-L3004 | |
| https://gitlab.com/catamphetamine/libphonenumber-js/-/issues/57 | https://wikitravel.org/en/International_dialling_prefix | |
| https://github.com/catamphetamine/libphonenumber-js/issues/376 | https://github.com/google/libphonenumber/blob/master/resources/phonenumber.proto | |
| https://gitlab.com/catamphetamine/libphonenumber-js/blob/master/METADATA.md#leading_digits | https://gitlab.com/catamphetamine/libphonenumber-js/-/issues/154 | |
| https://github.com/googlei18n/libphonenumber/blob/7e1748645552da39c4e1ba731e47969d97bdb539/resources/phonenumber.proto#L36 | https://reactcommunity.org/react-transition-group/css-transition | |
| https://reactjs.org/docs/hooks-reference.html#usestate | https://github.com/reactjs/react-transition-group/pull/749 | |
| https://docs.angularjs.org/api/ngAnimate | https://reactcommunity.org/react-transition-group/transition | |
| https://github.com/reactjs/react-transition-group/blob/5007303e729a74be66a21c3e2205e4916821524b/src/CSSTransition.js#L208-L215 | http://reactcommunity.org/react-transition-group/transition#Transition-prop-appear | |
| https://bugs.chromium.org/p/chromium/issues/detail?id=830565 | https://github.com/zloirock/core-js/issues/679 | |
| https://github.com/oven-sh/bun/issues/1633 | http://w3c.github.io/setImmediate/#si-setImmediate | |
| https://html.spec.whatwg.org/multipage/timers-and-user-prompts.html#timers | https://tc39.es/ecma262/#sec-IsHTMLDDA-internal-slot-aec | |
| https://tc39.es/ecma262/#sec-promise.prototype.catch | https://tc39.es/ecma262/#sec-ordinarytoprimitive |
{ "key": "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi7tIwUACkv6nFz9QbzH+bB+Kt3QU3QjCX0Qng+3ghJnVZ2XPFLKg+vBzeM5WtYGQOMVecuRXiF5bodj+M9PiCpNWy3MCGs4AvDiY9shVj4xgG7Wp50Gip5y7Sl5oVzjGau+H2uQRE3bqAc2fM1Xz1P99p0nvkxWlyV9bO+4Xp2fW/NQBx2903BqMwt1eemleit74/Ygfl6OWOy/xZyyF46hp6vniJun6L4S/ED2+z3GRhvN1V34NOqSBERPLRsXgzfcjfUZpPt6jSpKHQGzw+/JFhOqqkIr6GDVuZCuYIBXYaJlNRvF/V8Mwq6JCYztf2uftYzQFHThWC+K0W/1wuQIDAQAB", "name": "Calendly: Meeting Scheduling Software", "icons": { "16": "assets/icons/icon-16.png", "48": "assets/icons/icon-48.png", "128": "assets/icons/icon-128.png" }, "action": { "default_icon": { "19": "assets/icons/icon-19.png", "38": "assets/icons/icon-38.png" }, "default_title": "Calendly: Meeting Scheduling Software" }, "version": "4.12.0.0", "incognito": "not_allowed", "background": { "type": "module", "service_worker": "module_serviceworker.js" }, "update_url": "https://clients2.google.com/service/update2/crx", "description": "Schedule meetings without the hassle. Never get double booked. Calendly works with your calendar to automate appointment scheduling.", "permissions": [ "activeTab", "storage", "scripting", "unlimitedStorage" ], "options_page": "pages/frame.html?id=options", "version_name": "4.12.0.0 - 68c0689", "content_scripts": [ { "js": [ "/module_async_frame.js" ], "run_at": "document_start", "matches": [ "<all_urls>" ] }, { "js": [ "module_async_optibutton.js" ], "run_at": "document_start", "matches": [ "<all_urls>" ], "all_frames": false, "exclude_matches": [ "https://*.calendly.com/*", "http://localhost/*" ] }, { "js": [ "module_async_calendly.js" ], "run_at": "document_start", "matches": [ "https://*.calendly.com/*" ], "exclude_matches": [ "https://clients-assets.calendly.com/*/auth.html*", "https://clients-assets-staging.calendly.com/*/auth.html*" ] }, { "js": [ "module_async_auth.js" ], "run_at": "document_start", "matches": [ "https://clients-assets.calendly.com/*/auth.html*", "https://clients-assets-staging.calendly.com/*/auth.html*" ] }, { "js": [ "/module_async_gmenu.content.js" ], "css": [ "/styles/gmail.css" ], "run_at": "document_idle", "matches": [ "https://mail.google.com/*" ] }, { "js": [ "/module_async_gcal.content.js" ], "css": [ "/styles/gcal.css" ], "run_at": "document_idle", "matches": [ "https://calendar.google.com/*" ] }, { "js": [ "/module_async_linkedIn.content.js" ], "run_at": "document_idle", "matches": [ "https://www.linkedin.com/*" ] }, { "js": [ "/module_async_gong.content.js" ], "run_at": "document_idle", "matches": [ "https://*.gong.io/*" ] } ], "host_permissions": [ "<all_urls>" ], "manifest_version": 3, "optional_permissions": [], "externally_connectable": { "matches": [ "*://*.calendly.com/*", "*://localhost/*" ] }, "web_accessible_resources": [ { "matches": [ "https://*/*", "http://*/*" ], "resources": [ "pages/*.*", "assets/*.*", "*.js", "*.js.map", "*.html" ], "extension_ids": [ "cbhilkcodigmigfbnphipnnmamjfkipp" ] } ] }
ⓘ CRXaminer has partnered with our friends at Secure Annex to provide additional findings unique to their platform.
Secure Annex also analyzes extensions from other browsers, IDEs, and can continuously monitor.
This extension may not yet be analyzed by Secure Annex.