Is AODocs - Smartbar safe?

AODocs - Smartbar is medium risk. The rating reflects signals from our analysis that have not yet been published as detailed findings.

Who makes AODocs - Smartbar?

AODocs - Smartbar is published by Altirnao Inc, registered at 756 W Peachtree St NW, Suite 04-102, Atlanta, GA 30308, US. We hold no other store listing under the same registered identity.

What servers does AODocs - Smartbar send data to?

Our analysis observed AODocs - Smartbar sending data to www.googleapis.com, aodocs.altirnao.com and eu.aodocs.app.

Is AODocs - Smartbar for Google Workspace safe?

Medium risk

AODocs Smartbar stores a live Google Drive OAuth token in session storage accessible to untrusted page scripts on Google Drive, Docs, and Gmail.

The extension caches the user's Google Drive OAuth access token in chrome.storage.session and then configures that storage namespace with TRUSTED_AND_UNTRUSTED_CONTEXTS access, making the token readable by any script running on Google Drive, Docs, or Gmail pages. It also appends the OAuth token as a URL query parameter (smartBarToken) when building AODocs page links, causing the token to appear in browser history and server access logs at aodocs.altirnao.com. Additionally, the extension fetches UI selector configuration unauthenticated from a public Google Cloud Storage bucket (smartbar-test) and applies those selectors to Drive and Docs pages.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

AODocsv1.19Chrome Web Store

40Risk

Who publishes it

Altirnao Inc - no other listings under this identity

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher

AODocs

Declared legal entity

Altirnao Inc

Registered address

756 W Peachtree St NW, Suite 04-102, Atlanta, GA 30308, US

Registered contact

Stéphan Donzé

Website

smartbar.page.link/kb-home

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Where it sends data

Destinations our analysis observed AODocs - Smartbar contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

www.googleapis.comwidely used
AODocs - Smartbar sends data to www.googleapis.com. A widely used service: 44 other extensions we have analysed send data here.
aodocs.altirnao.com
AODocs - Smartbar sends data to aodocs.altirnao.com. No other extension we have analysed sends data here.
eu.aodocs.app
AODocs - Smartbar sends data to eu.aodocs.app. No other extension we have analysed sends data here.