Is Assistant for Instagram™ by NNT safe?
Assistant for Instagram adds tools to instagram.com and its page message handler checks the sender origin with a substring match.
The extension injects a content script into instagram.com tabs that can upload photos and videos as stories using the logged-in session. Its window message handler only checks that the sender origin contains the extension ID, so a page on a look-alike origin containing that ID could post a story to the user's account. The only confirmed finding is this medium-severity message-origin check.
Part of this rating comes from analysis signals we haven't published as detailed findings yet.
Who publishes ittechnologynoname - 6 other listings from the same operator, none carrying a finding
technologynoname - 6 other listings from the same operator, none carrying a finding
What this publisher told the store about itself, and the other listings that told it the same thing.
Same store account
6 other listings published from this account, 4k+ users between them, none of them carrying a finding.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Where it sends data
Destinations our analysis observed Assistant for Instagram™ by NNT contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- www.instagram.comwidely used
Assistant for Instagram™ by NNT sends data to www.instagram.com. A widely used service: 26 other extensions we have analysed send data here.