One click emoji downloader for Slack
Version 1 View in Chrome Web Store
Extension Details
Context-Aware Verdict
The extension has extremely limited trust indicators with only 201 users and a concerning 1.0 rating from just one review. The lack of developer information, missing last updated date, and absence of company reputation data significantly undermines credibility. The low adoption rate suggests either the extension is new or users are avoiding it due to quality or security concerns.
The downloads permission is particularly concerning for an emoji downloader, as this capability extends far beyond what should be necessary for the stated functionality. While the extension claims to download emojis for Slack, the broad downloads permission could potentially be exploited to download malicious files or access sensitive download history. The content script injection on Slack's emoji customization pages, combined with download capabilities, creates a risk vector for data exfiltration or unauthorized file downloads. The poor rating and minimal user feedback suggest potential functionality or security issues.
Given the high-risk permission and lack of trust indicators, consider running this extension in a separate Chrome profile to isolate potential security risks. Monitor your downloads folder closely for any unexpected files if you choose to use it. Consider alternative emoji management solutions with better security track records and user reviews. If you must use this extension, disable it immediately after use and regularly review your download history for suspicious activity.
Security Analysis
Security Analysis Details
Required Permissions:
- downloads
Embedded URLs (4 total):
| https://developer.chrome.com/docs/extensions/reference/downloads/#method-download | https://github.com/GoogleChrome/chrome-extensions-samples/blob/62a8f32a2d299c2259df6388e22a222200dec331/mv2-archive/api/downloads/download_links/popup.js#L49 | |
| https://slackmojis.com/emojis/12133-download | https://clients2.google.com/service/update2/crx |
Raw Manifest
{ "name": "One click emoji downloader for Slack", "version": "1", "background": { "service_worker": "background.js" }, "update_url": "https://clients2.google.com/service/update2/crx", "description": "Downloads slack emojis in one click", "permissions": [ "downloads" ], "content_scripts": [ { "js": [ "content.js" ], "matches": [ "https://*.slack.com/customize/emoji" ] } ], "manifest_version": 3 }