Is ArbiSource – Custom Scan Assistant safe?

Low risk

ArbiSource Custom Scan Assistant lets any website change its API token and start product scraping through an all-site message bridge.

The extension injects a content script on every site and accepts page messages without checking their origin. Those messages can store and validate an ArbiSource API key, start Shopify or product scraping, export stored products as CSV, and trigger ArbiSource scan APIs without user interaction.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

ArbiSourcev1.1.1Chrome Web Store
15Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Where it sends data

Destinations our analysis observed ArbiSource – Custom Scan Assistant contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • app.arbisource.com

    ArbiSource – Custom Scan Assistant sends data to app.arbisource.com. No other extension we have analysed sends data here.

Updated 30 September 2026inpkfpjmlfilmceajgappjdnbicphohj