[ new scan ] [ statistics ] [ github ] [ twitter ] [ help ]

Save to Koofr

Version 1.4.0 View in Chrome Web Store

Last scanned: about 1 month ago | force re-scan

Extension Details

Rating: 4.1 ★ (16 ratings)

Users: 8,000

Context-Aware Verdict

MEDIUM

Overall Risk

Trust Factors: The extension has a modest user base of 8,000 users with a decent 4.1-star rating from 16 reviews, suggesting legitimate usage. The name "Save to Koofr" indicates it's designed for cloud storage integration with the Koofr service, which is a legitimate cloud storage provider. However, the lack of clear developer information reduces transparency.

Concerns: The primary concern is the broad host permissions (http://*/*, https://*/*, <all_urls>) which allow the extension to access all websites. While this might be necessary for a cloud saving tool to work across different sites, it creates significant potential for data collection or misuse. The combination of activeTab, storage, and broad host permissions means the extension can access content from any website you visit and store that data locally. Content scripts running on all HTTP/HTTPS sites further amplify this access.

Recommendations: Given the medium risk level, consider running this extension in a separate Chrome profile dedicated to cloud storage activities. Before installing, verify that Koofr is the actual developer by checking their official website. Review what data the extension collects in its privacy policy. Monitor your browsing behavior after installation for any unusual activity. Consider whether you truly need cross-site saving functionality, as more limited permissions would be safer for basic cloud storage needs.

Findings

HIGH

Broad Host Permissions

This extension has broad host permissions allowing it to access many or all websites. This could potentially be used to steal sensitive data or track browsing activity.

MEDIUM

Medium-Risk Permission: activeTab

This extension has the activeTab permission. Can access the active tab when clicking the extension icon.

MEDIUM

Medium-Risk Permission: contextMenus

This extension has the contextMenus permission. Can add items to the context menu.

MEDIUM

Medium-Risk Permission: notifications

This extension has the notifications permission. Can show notifications.

MEDIUM

Medium-Risk Permission: storage

This extension has the storage permission. Can store data locally.

Raw Manifest

{
  "name": "__MSG_extName__",
  "icons": {
    "16": "icon16.png",
    "48": "icon48.png",
    "128": "icon128.png"
  },
  "action": {
    "default_icon": "icon128.png",
    "default_title": "__MSG_extName__"
  },
  "version": "1.4.0",
  "commands": {
    "screenshot": {
      "description": "__MSG_screenshotCmdDesc__",
      "suggested_key": {
        "mac": "Command+Shift+K",
        "default": "Ctrl+Shift+K"
      }
    },
    "saveLargestImage": {
      "description": "__MSG_screenshotCmdDesc__",
      "suggested_key": {
        "mac": "Command+Shift+L",
        "default": "Ctrl+Shift+L"
      }
    }
  },
  "background": {
    "service_worker": "background.js"
  },
  "update_url": "https://clients2.google.com/service/update2/crx",
  "description": "__MSG_extDesc__",
  "permissions": [
    "contextMenus",
    "storage",
    "activeTab",
    "alarms",
    "notifications"
  ],
  "default_locale": "en",
  "content_scripts": [
    {
      "js": [
        "content_script.js"
      ],
      "matches": [
        "http://*/*",
        "https://*/*"
      ]
    }
  ],
  "host_permissions": [
    "http://*/*",
    "https://*/*",
    "<all_urls>"
  ],
  "manifest_version": 3,
  "web_accessible_resources": [
    {
      "matches": [
        "*://*/*"
      ],
      "resources": [
        "content_script.js",
        "present"
      ]
    }
  ]
}

by ✦ Astarte

Save to Koofr

Extension Details

Context-Aware Verdict

Findings

Security Analysis Details

Required Permissions:

Host Permissions:

Embedded URLs (2 total):

Raw Manifest

Detections

Manifest Findings