Is Audio Recorder Online - Capture Screen Audio safe?

Medium risk

Audio Recorder Online is medium risk. Starting tab or mic recording reads the active tab's URL and title, then sends those details to an Aliyun logging endpoint as part of the recording-start log, alongside a persistent user ID.

santacruzreinaldo574v1.0.1Chrome Web Store
48Risk
Who publishes it

santacruzreinaldo574 - 2 other listings from the same operator, none carrying a finding

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
santacruzreinaldo574

Same store account

2 other listings published from this account, 15k+ users between them, none of them carrying a finding.

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Findings

Tab recording sends page URL and title to Aliyun logging.

Starting tab or mic recording reads the active tab's URL and title, then sends those details to an Aliyun logging endpoint as part of the recording-start log, alongside a persistent user ID.

Severity
Medium unwanted
Type
Unexpected
CWE
CWE-200
Source
Dynamic sandbox
What actually happens
You did this

The user starts tab recording or microphone recording.

The extension did this

The extension reads the active tab URL and page title and sends them to the Aliyun logging endpoint.

Captured request
POSTnc-dn-us.us-west-1.log.aliyuncs.com/logstores/extensions/track
Fields in the request
  • Current page URL
    https://example.com/meeting-notes (illustrative)

    Shows which webpage was open when recording started.

  • Current page title
    Meeting Notes - Example (illustrative)

    Adds readable context about the webpage being recorded.

What it can do

Permissions this extension asks for, as declared in version 1.0.1. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on every site you visit

    <all_urls>

  • Schedule its own background tasks

    alarms

  • Change per-site browser settings such as cookies, JavaScript and camera access

    contentSettings

  • Start, monitor and manage your downloads

    downloads

  • Run its own code inside the pages you visit

    scripting

  • Store data in your browser

    storage

  • Capture the video and audio of a tab

    tabCapture

Updated 30 September 2026gilmhnfniipoefkgfaoociaehdcmdcgk