GMB Everywhere - GBP Audit for Local SEO
Version 5.4.0 View in Chrome Web Store
Last scanned: about 1 month ago
| force re-scan
Extension Details
Developer:
gmbeverywhere.com
Rating:
4.7 ★
(106 ratings)
Users:
200,000
Context-Aware Verdict
This section provides a Claude-based AI analysis that applies additional context to the risk. Results are not guaranteed to be accurate.
LOW
Overall Risk
Trust Factors: The extension has strong trust indicators with 200,000 users, a high 4.7-star rating from 106 reviews, and is developed by a company with a dedicated domain (gmbeverywhere.com). The extension's purpose - auditing Google My Business profiles for local SEO - aligns well with its requested permissions and functionality. The substantial user base suggests it has been vetted by the community over time.
Concerns: The extension requests access to an extensive list of Google domains worldwide, which while appropriate for a global GMB auditing tool, represents a very broad scope of access. The storage permission allows local data retention, which could potentially include sensitive business information from GMB profiles. The lack of detailed developer information in the listing reduces transparency about the company behind the extension.
Recommendations: This extension appears legitimate and purpose-built for its stated function. The risk level is low due to minimal permissions and strong user metrics. However, users should be aware that the extension can access and potentially store data from any Google domain they visit. For businesses handling highly sensitive client data, consider testing the extension in a separate Chrome profile first. Review the extension's privacy policy on the developer's website to understand data handling practices. The extension is generally safe for most local SEO professionals and business owners.
Findings
This section provides a detailed analysis of the extension's security posture, without broader context. Assumes worst-case impact.
MEDIUM
Medium-Risk Permission: storage
This extension has the storage permission. Can store data locally.
Security Analysis Details
Required Permissions:
- storage
Embedded URLs (191 total):
| https://app.gmbeverywhere.com/release7/audit-dashboard.html | https://app.gmbeverywhere.com/release7/audits/basic-audit.html | |
| https://app.gmbeverywhere.com/release7/audits/website-audit.html | https://app.gmbeverywhere.com/release7/audits/review-audit.html | |
| https://app.gmbeverywhere.com/release7/audits/post-audit.html | https://data.gmbeverywhere.com/xano/save-temporary-data-to-store | |
| https://app.gmbeverywhere.com/release7/audits/teleport.html | https://www.google.com/ | |
| https://app.gmbeverywhere.com/release7/audits/error.html | https://app.gmbeverywhere.com/release7/category-tool/category-finder.html | |
| https://app.gmbeverywhere.com/release7/ai/landing-page-ai.html | https://app.gmbeverywhere.com/release7/local-scan/local-scan.html | |
| https://app.gmbeverywhere.com/release7/ai/ | https://search.google.com/local/reviews?hl=en-us&placeid= | |
| https://www.google.com/search?kgmid= | https://git.io/fjule | |
| https://git.io/fxCyr | https://www.google | |
| http://127.0.0.1:5500/appGmbeverywhere/release7/audits/website-audit.html | http://www.unicode.org/reports/tr35/tr35-31/tr35-dates.html#Date_Format_tokens | |
| https://github.com/date-fns/date-fns/issues/376 | https://github.com/date-fns/date-fns/blob/master/docs/upgradeGuide.md#Common-Changes | |
| https://www.unicode.org/reports/tr35/tr35-dates.html#Date_Field_Symbol_Table | https://date-fns.org/docs/getISOWeekYear | |
| https://date-fns.org/docs/getWeekYear | https://blog.date-fns.org/post/unicode-tokens-in-date-fns-v2-sreatyki91jg | |
| https://date-fns.org/docs/Locale | https://date-fns.org/docs/toDate | |
| http://es5.github.io/#x15.9.1.1 | https://github.com/kossnocorp | |
| https://github.com/leshakoss | http://www.unicode.org/reports/tr35/tr35-31/tr35-dates.html#Date_Format_Patterns | |
| https://docs.google.com/spreadsheets/d/e/2PACX-1vQOPU3xUhplll6dyoMmVUXHKl_8CRDs6_ueLmex3SoqwhuolkuN3O05l4rqx5h1dKX8eb46Ul-CCSrq/pubhtml?gid=0&single=true | https://date-fns.org/docs/setISOWeekYear | |
| https://date-fns.org/docs/setWeekYear | https://github.com/date-fns/date-fns/issues/37 | |
| http://www.w3.org/2000/svg | https://www.google.com/maps/search/dentist%20nearby | |
| https://www.gmbeverywhere.com/update-page | https://app.gmbeverywhere.com/release7/admin-pages/uninstall-page.html | |
| https://clients2.google.com/service/update2/crx | https://www.google.ae/ | |
| https://www.google.am/ | https://www.google.as/ | |
| https://www.google.at/ | https://www.google.az/ | |
| https://www.google.ba/ | https://www.google.be/ | |
| https://www.google.bg/ | https://www.google.bi/ | |
| https://www.google.bs/ | https://www.google.ca/ | |
| https://www.google.cd/ | https://www.google.cg/ | |
| https://www.google.ch/ | https://www.google.ci/ | |
| https://www.google.cl/ | https://www.google.co.bw/ | |
| https://www.google.co.ck/ | https://www.google.co.cr/ | |
| https://www.google.co.hu/ | https://www.google.co.id/ | |
| https://www.google.co.il/ | https://www.google.co.im/ | |
| https://www.google.co.in/ | https://www.google.co.je/ | |
| https://www.google.co.jp/ | https://www.google.co.ke/ | |
| https://www.google.co.kr/ | https://www.google.co.ls/ | |
| https://www.google.co.ma/ | https://www.google.co.nz/ | |
| https://www.google.co.th/ | https://www.google.co.ug/ | |
| https://www.google.co.uk/ | https://www.google.co.uz/ | |
| https://www.google.co.ve/ | https://www.google.co.vi/ | |
| https://www.google.co.za/ | https://www.google.co.zm/ |
Page 1 of 3
Raw Manifest
{ "name": "GMB Everywhere - GBP Audit for Local SEO", "icons": { "16": "imgs/icons/icon16.png", "32": "imgs/icons/icon32.png", "48": "imgs/icons/icon48.png", "128": "imgs/icons/icon128.png" }, "action": {}, "version": "5.4.0", "background": { "service_worker": "main-service-worker.js" }, "update_url": "https://clients2.google.com/service/update2/crx", "description": "Find GMB categories, GMB Audits, Review audit, and Post audit. Spy, audit, and crush your GMB competitor with this Local SEO tool.", "permissions": [ "storage" ], "content_scripts": [ { "js": [ "dist/content.bundle.js" ], "css": [], "matches": [ "https://www.google.ae/*", "https://www.google.am/*", "https://www.google.as/*", "https://www.google.at/*", "https://www.google.az/*", "https://www.google.ba/*", "https://www.google.be/*", "https://www.google.bg/*", "https://www.google.bi/*", "https://www.google.bs/*", "https://www.google.ca/*", "https://www.google.cd/*", "https://www.google.cg/*", "https://www.google.ch/*", "https://www.google.ci/*", "https://www.google.cl/*", "https://www.google.co.bw/*", "https://www.google.co.ck/*", "https://www.google.co.cr/*", "https://www.google.co.hu/*", "https://www.google.co.id/*", "https://www.google.co.il/*", "https://www.google.co.im/*", "https://www.google.co.in/*", "https://www.google.co.je/*", "https://www.google.co.jp/*", "https://www.google.co.ke/*", "https://www.google.co.kr/*", "https://www.google.co.ls/*", "https://www.google.co.ma/*", "https://www.google.co.nz/*", "https://www.google.co.th/*", "https://www.google.co.ug/*", "https://www.google.co.uk/*", "https://www.google.co.uz/*", "https://www.google.co.ve/*", "https://www.google.co.vi/*", "https://www.google.co.za/*", "https://www.google.co.zm/*", "https://www.google.com/*", "https://www.google.com.af/*", "https://www.google.com.ag/*", "https://www.google.com.ar/*", "https://www.google.com.au/*", "https://www.google.com.bd/*", "https://www.google.com.bo/*", "https://www.google.com.br/*", "https://www.google.com.bz/*", "https://www.google.com.co/*", "https://www.google.com.cu/*", "https://www.google.com.do/*", "https://www.google.com.ec/*", "https://www.google.com.eg/*", "https://www.google.com.et/*", "https://www.google.com.fj/*", "https://www.google.com.gi/*", "https://www.google.com.gt/*", "https://www.google.com.hk/*", "https://www.google.com.jm/*", "https://www.google.com.kw/*", "https://www.google.com.ly/*", "https://www.google.com.mt/*", "https://www.google.com.mx/*", "https://www.google.com.my/*", "https://www.google.com.na/*", "https://www.google.com.nf/*", "https://www.google.com.ni/*", "https://www.google.com.np/*", "https://www.google.com.om/*", "https://www.google.com.pa/*", "https://www.google.com.pe/*", "https://www.google.com.ph/*", "https://www.google.com.pk/*", "https://www.google.com.pr/*", "https://www.google.com.py/*", "https://www.google.com.qa/*", "https://www.google.com.sa/*", "https://www.google.com.sb/*", "https://www.google.com.sg/*", "https://www.google.com.sv/*", "https://www.google.com.tj/*", "https://www.google.com.tr/*", "https://www.google.com.tw/*", "https://www.google.com.ua/*", "https://www.google.com.uy/*", "https://www.google.com.uz/*", "https://www.google.com.vc/*", "https://www.google.com.vn/*", "https://www.google.cz/*", "https://www.google.de/*", "https://www.google.dj/*", "https://www.google.dk/*", "https://www.google.dm/*", "https://www.google.ee/*", "https://www.google.es/*", "https://www.google.fi/*", "https://www.google.fm/*", "https://www.google.fr/*", "https://www.google.gg/*", "https://www.google.gl/*", "https://www.google.gm/*", "https://www.google.gr/*", "https://www.google.hn/*", "https://www.google.hr/*", "https://www.google.ht/*", "https://www.google.hu/*", "https://www.google.ie/*", "https://www.google.is/*", "https://www.google.it/*", "https://www.google.jo/*", "https://www.google.kg/*", "https://www.google.kz/*", "https://www.google.li/*", "https://www.google.lk/*", "https://www.google.lt/*", "https://www.google.lu/*", "https://www.google.lv/*", "https://www.google.md/*", "https://www.google.mn/*", "https://www.google.ms/*", "https://www.google.mu/*", "https://www.google.mw/*", "https://www.google.net/*", "https://www.google.nl/*", "https://www.google.no/*", "https://www.google.nr/*", "https://www.google.nu/*", "https://www.google.off.ai/*", "https://www.google.org/*", "https://www.google.pl/*", "https://www.google.pn/*", "https://www.google.pt/*", "https://www.google.ro/*", "https://www.google.ru/*", "https://www.google.rw/*", "https://www.google.sc/*", "https://www.google.se/*", "https://www.google.sh/*", "https://www.google.si/*", "https://www.google.sk/*", "https://www.google.sm/*", "https://www.google.sn/*", "https://www.google.tm/*", "https://www.google.to/*", "https://www.google.tp/*", "https://www.google.tt/*", "https://www.google.tv/*", "https://www.google.uz/*", "https://www.google.vg/*", "https://www.google.vu/*", "https://www.google.ws/*" ] } ], "manifest_version": 3, "web_accessible_resources": [ { "matches": [ "<all_urls>" ], "resources": [ "imgs/loading.gif", "imgs/star_icon.svg", "imgs/rocket_icon.svg", "imgs/megaphone_icon.svg", "imgs/half_star_icon.svg", "imgs/pin_icon.svg", "imgs/gmb.png", "imgs/waving_hand_icon.svg", "imgs/brain_icon.svg", "imgs/desktop_icon.svg", "audit-dashboard.html" ], "extension_ids": [] } ] }
ⓘ CRXaminer has partnered with our friends at Secure Annex to provide additional findings unique to their platform.
Secure Annex also analyzes extensions from other browsers, IDEs, and can continuously monitor.
Loading Secure Annex data...
Unable to load Secure Annex data.
This extension may not yet be analyzed by Secure Annex.
Detections
0Critical
0
High
0
Medium
0
Low
0
Has Verdicts
Yes
Manifest Findings
0Critical
0
High
0
Medium
0
Low
0
Secure Annex analyzed version: -