[ new scan ] [ statistics ] [ github ] [ twitter ] [ help ]

Starting analysis...

Do Browser: AI Browser Agent

Version 3.1.25 View in Chrome Web Store

Last scanned: 19 days ago | force re-scan

Extension Details

Developer: dobrowser.io

Rating: 3.4 ★ (58 ratings)

Users: 10,000

Context-Aware Verdict

CRITICAL

Overall Risk

Trust Factors: The extension has a moderate user base of 10,000 users but concerning trust indicators including a below-average rating of 3.4 stars from only 58 reviews, suggesting limited user satisfaction or engagement. The developer domain dobrowser.io appears to be purpose-built for this extension, which provides less established credibility compared to well-known companies.

Concerns: The extension exhibits multiple high-risk characteristics that are concerning for an AI browser agent. The debugger permission is particularly alarming as it allows manipulation of other extensions and browser debugging capabilities, which far exceeds typical needs for an AI assistant. The combination of broad host permissions with tabs access creates extensive surveillance capabilities across websites. The unsafe-eval CSP policy allows dynamic JavaScript execution, creating potential attack vectors for malicious code injection. The scripting permission combined with these other capabilities creates a powerful toolkit that could be misused for data harvesting or malicious activities.

Recommendations: Given the critical risk level, avoid installing this extension on your primary browser profile. If you must test it, create a dedicated Chrome profile with no sensitive data or important accounts logged in. Consider alternative AI browser assistants from more established developers with better security practices. Monitor your browsing behavior closely if installed, and remove immediately if you notice any suspicious activity or performance issues.

Findings

HIGH

Broad Host Permissions

This extension has broad host permissions allowing it to access many or all websites. This could potentially be used to steal sensitive data or track browsing activity.

HIGH

High-Risk Permission: debugger

This extension has the debugger permission. Can debug and manipulate other extensions/apps. This could potentially be used maliciously to compromise security or privacy.

HIGH

High-Risk Permission: tabs

This extension has the tabs permission. Can access browser tab information and manipulate tabs. This could potentially be used maliciously to compromise security or privacy.

HIGH

Unsafe JavaScript Evaluation

This extension's Content Security Policy allows 'unsafe-eval', which permits dynamic JavaScript code execution using eval() and similar functions. This is a significant security risk as it could allow execution of malicious code.

MEDIUM

Medium-Risk Permission: activeTab

This extension has the activeTab permission. Can access the active tab when clicking the extension icon.

MEDIUM

Medium-Risk Permission: storage

This extension has the storage permission. Can store data locally.

Security Analysis Details

Required Permissions:

sidePanel
storage
debugger
tabs
activeTab
scripting

Optional Permissions:

clipboardRead
clipboardWrite
management
history
topSites
tabGroups
tabCapture

Host Permissions:

https://*.dobrowser.io/*
https://platform.claude.com/*

Content Security Policy:

sandbox: sandbox allow-scripts allow-forms allow-popups allow-modals; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: http:; child-src 'self' blob:

Embedded URLs (96 total):

https://www.dobrowser.io	https://clients2.google.com/service/update2/crx
https://platform.claude.com/	http://127.0.0.1:3000/
http://www.w3.org/2000/svg	https://tailwindcss.com
https://react.dev/errors/	http://www.w3.org/1998/Math/MathML
http://www.w3.org/1999/xlink	http://www.w3.org/XML/1998/namespace
https://html.spec.whatwg.org/multipage/custom-elements.html#valid-custom-element-name	https://base-ui.com/production-error/
https://docs.expo.dev/versions/latest/sdk/expo/#expofetch-api	https://docs.anthropic.com/en/docs/resources/model-deprecations
https://platform.claude.com/docs/en/build-with-claude/adaptive-thinking	https://api.anthropic.com
https://github.com/anthropics/anthropic-sdk-typescript#streaming-responses	https://github.com/anthropics/anthropic-sdk-typescript#long-requests
https://api.openai.com/v1	https://help.openai.com/en/articles/5112595-best-practices-for-api-key-safety
https://cloudcode-pa.googleapis.com	https://daily-cloudcode-pa.sandbox.googleapis.com
https://autopush-cloudcode-pa.sandbox.googleapis.com	https://aiplatform.googleapis.com/
https://generativelanguage.googleapis.com/	https://generativelanguage.googleapis.com
http://example.com	http://www.w3.org/1999/xhtml
http://www.w3.org/2000/xmlns/	http://www.ibm.com/data/dtd/v11/ibmxhtml1-transitional.dtd
https://github.com/syntax-tree/hast-util-to-jsx-runtime	https://github.com/markedjs/marked.
https://api.mistral.ai	https://docs.mistral.ai/getting-started/models/#api-versioning
http://json-schema.org/draft-07/schema#	https://json-schema.org/draft/2019-09/schema#
https://chatgpt.com/backend-api	https://api.openai.com/auth
https://feross.org/opensource	https://feross.org
https://tinyurl.com/y2uuvskb	http://bit.ly/2kdckMn
https://github.com/focus-trap/tabbable/blob/master/LICENSE	http://feross.org
https://example.com	https://github.com/le0pard/re2js#readme
https://bedrock-runtime.us-east-1.amazonaws.com	https://api.cerebras.ai/v1
https://api.individual.githubcopilot.com	https://generativelanguage.googleapis.com/v1beta
https://api.groq.com/openai/v1	https://router.huggingface.co/v1
https://api.kimi.com/coding	https://api.minimax.io/anthropic
https://api.minimaxi.com/anthropic	https://opencode.ai/zen
https://opencode.ai/zen/v1	https://opencode.ai/zen/go/v1
https://opencode.ai/zen/go	https://openrouter.ai/api/v1
https://ai-gateway.vercel.sh	https://api.x.ai/v1
https://api.z.ai/api/coding/paas/v4	https://raw.githubusercontent.com/ajv-validator/ajv/master/lib/refs/data.json#
http://json-schema.org/draft-07/schema	http://json-schema.org/schema
https://example.com/report.pdf	https://github.com/jonschlinkert/is-extendable
https://github.com/jonschlinkert/strip-bom-string	https://example.com/
https://example.com/data	https://complex-spa.com
https://news.ycombinator.com	https://example.com/widget
https://example.com/login	https://d3js.org/d3.v7.min.js
https://claude.ai/oauth/authorize	https://console.anthropic.com/oauth/code/callback
https://platform.claude.com/oauth/code/callback	https://auth.openai.com/oauth/authorize

Page 1 of 2

Raw Manifest

{
  "key": "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/A+BBS56+dW1FK+JP03j4nzM1+FYncwXtvGgzMwrvdgBQ5MABuP7IaIyHMaDIigEVX/52YRZkGCUzWL/L6J+aYVRZeQ6y/KiGH/OjFmTuZyf2SRWC9CNcPjTA/MU4tSgm+kY6khHAHulUWDugigZMURIPp2k7MlkWkKEvKk/j1rJKLPmec7HSQVP7Xc++7sSdhJ87YyOSmAl+QfcL4bRzwSQhbf4MGelX2ryjqlTIB4zougtN2lRA2RGVsrd3LaVxe4fUJWA5uY3x1URoeHQuuUiADRveaBspF0YS8eb6N8aaePfHYXlRTSoCqIXiW1gyyX83YvPpOpLuMaLMBwbwIDAQAB",
  "name": "Do Browser: AI Browser Agent",
  "icons": {
    "16": "icon/16.png",
    "32": "icon/32.png",
    "48": "icon/48.png",
    "96": "icon/96.png",
    "128": "icon/128.png"
  },
  "action": {},
  "omnibox": {
    "keyword": "do"
  },
  "sandbox": {
    "pages": [
      "sandbox-render.html",
      "sandbox.html"
    ]
  },
  "version": "3.1.25",
  "commands": {
    "toggle-sidebar": {
      "description": "Toggle \"Do Browser\" sidepanel on the current page.",
      "suggested_key": {
        "mac": "Command+Shift+Period",
        "default": "Ctrl+Shift+Period"
      }
    },
    "quick-command-palette": {
      "description": "Open \"Do Browser\" quick command palette on the active page.",
      "suggested_key": {
        "mac": "Command+Shift+P",
        "default": "Ctrl+Shift+P"
      }
    }
  },
  "background": {
    "service_worker": "background.js"
  },
  "side_panel": {
    "default_path": "sidepanel.html"
  },
  "update_url": "https://clients2.google.com/service/update2/crx",
  "description": "Your Browser, Automated. Describe what you want, watch it happen.",
  "permissions": [
    "sidePanel",
    "storage",
    "debugger",
    "tabs",
    "activeTab",
    "scripting"
  ],
  "content_scripts": [],
  "host_permissions": [
    "https://*.dobrowser.io/*",
    "https://platform.claude.com/*"
  ],
  "manifest_version": 3,
  "optional_permissions": [
    "clipboardRead",
    "clipboardWrite",
    "management",
    "history",
    "topSites",
    "tabGroups",
    "tabCapture"
  ],
  "externally_connectable": {
    "matches": [
      "https://*.dobrowser.io/*",
      "http://localhost:3000/*",
      "http://127.0.0.1:3000/*"
    ]
  },
  "content_security_policy": {
    "sandbox": "sandbox allow-scripts allow-forms allow-popups allow-modals; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: http:; child-src 'self' blob:"
  }
}

by ✦ Astarte

Do Browser: AI Browser Agent

Extension Details

Context-Aware Verdict

Findings

Security Analysis Details

Required Permissions:

Optional Permissions:

Host Permissions:

Content Security Policy:

Embedded URLs (96 total):

Raw Manifest

Detections

Manifest Findings