CRX aminer
Extension icon

Rewards Search Automator

Version 1.6.5 View in Chrome Web Store

Last scanned: 12 days ago | force re-scan

Extension Details

Developer: buildwithkt.dev
Rating: 3.7 ★ (824 ratings)
Users: 80,000

Context-Aware Verdict

CRITICAL
Overall Risk
Trust Factors:

The extension has a moderate user base of 80,000 users and an average rating of 3.7 stars, suggesting mixed user experiences. The developer "buildwithkt.dev" appears to be an individual developer rather than an established company, which reduces institutional trust. The extension's purpose of automating reward searches is legitimate but inherently involves manipulating browsing behavior.

Concerns:

The permission set is extremely excessive for a search automation tool. The debugger permission is particularly alarming as it allows manipulation of other extensions and deep system access. The combination of history, webNavigation, and tabs permissions creates a comprehensive surveillance capability that far exceeds what's needed for search automation. The broad host permissions across all URLs enable data collection from any website you visit. The browsingData permission adds another layer of privacy invasion potential. These permissions collectively create a perfect storm for data harvesting, tracking, and potential malicious activity.

Recommendations:

Given the critical risk level, avoid installing this extension entirely. If you absolutely must use it, create a completely separate Chrome profile with no personal data, saved passwords, or sensitive browsing activity. Consider using established alternatives from reputable companies instead. The permission set suggests this extension could function as comprehensive spyware regardless of its stated purpose. The risk-to-benefit ratio is heavily skewed toward risk.

Findings

HIGH
Broad Host Permissions
This extension has broad host permissions allowing it to access many or all websites. This could potentially be used to steal sensitive data or track browsing activity.
HIGH
High-Risk Permission: debugger
This extension has the debugger permission. Can debug and manipulate other extensions/apps. This could potentially be used maliciously to compromise security or privacy.
HIGH
High-Risk Permission: history
This extension has the history permission. Can access your browsing history. This could potentially be used maliciously to compromise security or privacy.
HIGH
High-Risk Permission: tabs
This extension has the tabs permission. Can access browser tab information and manipulate tabs. This could potentially be used maliciously to compromise security or privacy.
HIGH
High-Risk Permission: webNavigation
This extension has the webNavigation permission. Can track your web navigation. This could potentially be used maliciously to compromise security or privacy.
MEDIUM
Medium-Risk Permission: storage
This extension has the storage permission. Can store data locally.