Social & Communication extensions
Security reviews of 152 Social & Communication browser extensions, each rated on what its code does when it runs.
tiktok-video-downloader-%E2%80%93
Neo Cortex
Lowtiktok video downloader - One Click tiktok video saver embeds a Supabase API key for subscription and usage-log requests.
ViralSort - Sort Instagram Reels & Manage in One Dashboard.
Pradeep Malakar
CleanViralSort sends Instagram Reel URLs and engagement metadata to its backend for sorting.
Watch on Odysee
Odysee
CleanWatch on Odysee sends YouTube video and channel IDs to Odysee's resolver API to find matching Odysee content.
Whatsapp Chat Backup - Backup WA Messages
williammiller7048
CleanWhatsapp Chat Backup sends signed-in account identity and page-view telemetry to Mixpanel from WhatsApp Web and its popup.
Youtube Right Side Comments
Shantesh Sindgi
LowYoutube Right Side Comments loads popup fonts and stylesheets from Google Fonts and BootstrapCDN.
AI assistant for Linkedin
Groupe AI commenter
CleanAI assistant for Linkedin sends selected LinkedIn text and nearby post context to Ideta's API.
Bandcamp Scrobbler
Ben W
LowBandcamp Scrobbler embeds Last.fm API credentials and sends signed scrobble/session requests to Last.fm.
Burrow
Different Squares
CleanBurrow rewrites gopher:// links and form entries through Floodgap's public Gopher proxy.
Easy for X
WWEvents
LowEasy for X exposes its extension ID to Twitter/X pages through injected UI links and images.
Find on Reddit
adeelh
CleanFind on Reddit sends visited page URLs to Reddit APIs during default tab navigation searches.
Forum Addon for IMDb
Film|Boards
CleanForum Addon for IMDb sends IMDb title and name page identifiers to Filmboards to load matching forum threads.
I Can See You
Improvise GPT
CleanI Can See You reads Facebook and Instagram page content to open profile pictures and media URLs.
MacBed Update Notifier
Appked
CleanMacBed Update Notifier periodically requests MacBed's RSS feed from the background.
MMT
My Most Trusted
LowMy Most Trusted Network looks up your IP geolocation through ip-api.com over unencrypted HTTP.
Native MathML
Frédéric Wang
CleanNative MathML writes a temporary MathJax menu cookie on every page where its content script runs.
Nightmode Messenger
Andrew Tong
LowNightmode Messenger loads fixed Imgur images from Messenger pages.
POST2PDF
WeBooster Team
CleanPOST2PDF sends Instagram media thumbnail URLs through cdn.getwebooster.workers.dev during PDF generation.
Pebble - Digital Carbon Emissions Calculator
Antarctica
CleanPebble stores per-site browsing activity metrics locally when its carbon analysis is running.
Ready Mail New Tab
Social Utility Extensions
LowReady Mail New Tab exposes its persistent install alias to newtabtools.com pages.
Reddit post notifier
Vitaly Yerofeyevsky
LowReddit post notifier asks Reddit for history access when users connect an account.
Send ChatGPT with WhatsApp
sendgpt
CleanSend ChatGPT with WhatsApp copies visible chat text into a WhatsApp share URL when you click its popup button.
Share-it
psephopaiktes
LowShare-it sends the active tab title or URL to selected sharing services over unencrypted HTTP when you click share buttons.
Spotube - Youtube to Spotify extension
Luke Day
LowSpotube exposes its OAuth callback so websites can close the active tab and replace the stored Spotify token.
StoryVerse Stories Hub for FB and IG
caarterbillings
CleanStoryVerse Stories Hub for FB and IG reads Facebook and Instagram cookies and request tokens to load stories.
StreetPass for Mastodon
tylerdeitz
CleanStreetPass for Mastodon records rel=me profile links and page URLs for Mastodon matching.
TokGPT - ChatGPT for TikTok
Tok Tools
LowTokGPT - ChatGPT for TikTok lets any website send TikTok subtitles through your ChatGPT session.
WhatsApp Direct Message
Giuliano Marinelli
CleanWhatsApp Direct Message sends selected or entered phone numbers to WhatsApp and saves them in Chrome sync storage.
WhatsBooster
Vitor Henckel
CleanWhatsBooster reads WhatsApp group member phone numbers and saves them for local CSV, XLS, or TXT export.
xss-kick-%E2%80%93-kickcom-extra
XystemSoft
CleanXss Kick uses your Kick session cookie to run configured chat and moderation actions on kick.com.
TikTok AI
DevFortress
CleanMailMagic sends TikTok DM and comment conversations to its own servers to draft AI reply suggestions.
Perfect Sender
Perfect Sender
LowPerfect Sender sends your license key and device identifiers to its server over plain HTTP instead of HTTPS.
Taplio X
Medium