Tools extensions

Security reviews of 346 Tools browser extensions, each rated on what its code does when it runs.

  1. Crunchbase - B2B Company & Contact Info

    Crunchbase

    Low

    Crunchbase sends LinkedIn parser errors, including page DOM snippets and URL context, to Sentry.

  2. Discord Chat Export Tool

    summer25934930

    Low

    Discord Chat Export Tool copies your Discord authorization token into a page-readable body attribute on discord.com.

  3. EasyKOL: Find Similar Creators on YouTube, TikTok & Instagram

    EasyKOL

    Medium

    EasyKOL intercepts Instagram and TikTok API responses to collect creator profile, post, video, and hashtag metrics.

  4. ElevateTab

    https://elevatetab.com/

    Low

    Elevate Tab routes new-tab searches to search.elevatetab.com over cleartext HTTP, attaching a persistent per-user ID with each query.

  5. Email Scraper for Ins

    EchoWebBot Team

    Medium

    Email Scraper for Ins uploads extracted Instagram lead records to remote-configured Echobot endpoints.

  6. WAexport

    WAtext

    Medium
  7. Export Followers free

    IGExport

    Low

    Export Followers free proxies Instagram profile avatar URLs through cdn.getwebooster.workers.dev in export results.

  8. Fiverr Mate:Fiverr Gig SEO Tool

    syntaximos

    Clean

    Fiverr Mate reads a Syntaximos login cookie and sends it to apifiverrmate.syntaximos.com to obtain an extension API token.

  9. FFC

    Jack's Flight Club

    Clean

    Flight Fare Compare opens fare-comparison sites with your Google Flights route, dates, passenger details, currency, and locale.

  10. Flowith Web Clipper

    Flowith

    Low

    Flowith Web Clipper sends clipped content to Flowith's dev-edge server with a bundled API key.

  11. GmailSenderIcons

    Digital Inspiration

    Clean

    Gmail Sender Icons sends sender email domains to Google's favicon service when showing icons in Gmail inbox rows.

  12. Google rank checker

    Vahid Naderi

    Clean

    This extension checks where saved websites rank in the top 100 Google results for searched keywords.

  13. Hide Google AI Overviews

    Appvector

    Medium
  14. Madomi - Manga Translator

    Pawaka Labs

    Medium

    Madomi - Manga Translator sends page text, image URLs, and image data to borang.skrin.xyz for translation and summarization.

  15. OA.mg

    OA.mg

    Clean

    OA.mg reads the active page for a DOI when clicked and opens the matching OA.mg work page.

  16. Quizzard

    Ambrose Nilam

    Clean

    Quizzard sends entered or selected search text to Google Search to find matching Quizlet pages.

  17. Resizer

    cloudHQ

    Low

    Resize Gmail Sidebar by cloudHQ sends Gmail account identifiers to cloudHQ during Gmail page initialization.

  18. SearchBlox

    SearchBlox

    Medium
  19. SimilarTube - Find Similar YouTube Channels

    SimilarTube

    Low

    SimilarTube reads the public contact email off YouTube channel About pages and sends it, plus your account name, to its own servers.

  20. Topview AI extension: Turn Your Product Into Viral Videos

    topview.ai

    Medium

    Topview AI extension lets any web page seed its social publishing state and open supported social platform tabs.

  21. MediaHarvest

    Extension Magic box

    Clean

    The extension sends X/Twitter page URLs, account email, settings, and persistent IDs to xcontentbackuptool endpoints.

  22. AI Content Visibility Checker, powered by Adobe Brand Visibility

    Adobe Inc.

    Clean

    AI Content Visibility Checker sends sampled popup telemetry with the active page URL to Adobe RUM.

  23. AI Sidebar

    AI Sidebar

    Low

    AI Sidebar weakens frame protections and changes fetch headers for pages opened inside its side panel.

  24. Beesy: Record Google Meets

    The Pira Org

    Clean

    Beesy sends Google Meet recording event telemetry, including meeting IDs, to Google Analytics.

  25. Brandsearch - eCommerce, Dropshipping, Shopify Spy, Meta ads

    Brandsearch.co

    Low

    BrandSearch stores its access and refresh tokens with an encryption key bundled in the extension.

  26. Smart Search

    cloudHQ

    Low

    ChatGPT for Google by cloudHQ sends Gmail account identifiers and page context to cloudHQ account-check endpoints.

  27. ChatTube

    Jiajun Yan

    Clean

    ChatTube sends YouTube transcripts, video details, chat prompts, and Firebase ID tokens to chattube.io.

  28. ChatsNow: ChatGPT AI Sidebar (o1-preview, GPT-4o, Claude 3, Gemini)

    kevin

    High
  29. Cityscapes

    MNS Digital Media

    Medium

    Cityscapes sends each Chrome top-sites URL to Google's favicon service when it renders the new-tab page.

  30. Clear Cache Chrome

    dreambuilder.first

    Low

    Clear Cache Chrome includes a Google Analytics API secret in its shipped code and sends analytics events to Google.

  31. Dashy New Tab Dashboard and Side Panel

    Dashy

    Clean

    Dashy New Tab Dashboard and Side Panel removes frame-blocking security headers for embedded web content.

  32. Discord Translator

    CodeCode.Me

    Clean

    Discord Translator sends Discord message text to translation services when you translate a message.

  33. Download Aliexpress Product Images & Videos

    Saxsos Inc

    Medium

    Download Aliexpress Product Images & Videos rewrites AliExpress shopping pages through an affiliate deep-link endpoint.

  34. Drop

    https://droptab.net/

    Medium

    Drop Tab sends weather location lookups to geoiplookup.io and droptab.net, and adds install IDs to new-tab searches.

  35. Email Extractor

    sally

    Medium
  36. Email Signature & Email Tracker. MySignature

    MySignature

    Clean

    Email Signature & Email Tracker. MySignature injects tracking pixels into paid Gmail-tracked messages and reports link metadata.

  37. Eztrackr

    Eztrackr

    Low

    Eztrackr ships a developer VS Code Git IPC auth token and build environment values in its extension bundle.

  38. Findy: Email Search and Outreach by Reply

    reply.io

    Medium

    Findy reads your LinkedIn session cookies and auth headers and sends them to Reply.io to operate LinkedIn on your behalf.

  39. FreshySearch

    Freshy

    Clean

    Freshy Search redirects default-search queries to Freshy with a stored Freshy GUID.

  40. GMB Crush

    gmbcrush

    Medium
  41. Google 100 Results: Now you can have this again in google search settings!

    GAMA

    Low

    Google 100 Results loads popup styles and fonts from Cloudflare and Google CDN servers.

  42. HTML Elements Screenshot

    Sevina

    Clean

    HTML Elements Screenshot can make every website response appear CORS-permissive when its CORS mode is enabled.

  43. Highlighty: Search, Find, Multi Highlight

    Highlighty App

    Clean

    Highlighty stores visited page URLs and search-term match counts locally when optional analytics are enabled.

  44. IGFollower - IG Follower Export Tool

    lazytechofficial

    Clean

    IGFollower reads Instagram cookies and queries Instagram follower/profile APIs when you export followers.

  45. IP Whois

    Sergio

    Low

    IP Whois sends active-tab site IP geolocation lookups to ip-api.com over plaintext HTTP.

  46. Image Downloader Pro Tool

    Low

    Image Downloader Pro Tool injects a page-visible DOM marker derived from its extension ID on every website.

  47. Kakadu VPN

    KAKADU SECURE TECHNOLOGIES — FZCO

    Low

    Kakadu VPN: One Family routes browser traffic through a Kakadu-provided HTTP proxy when VPN mode is connected.

  48. M3U8 Downloaders - Video Downloads Simplified

    www.videodownloadai.com | www.m3u8downloaders.com

    Clean

    M3U8 Downloaders sends selected media URLs, page titles, and referring tab URLs to m3u8downloaders.com.

  49. MindStudio

    High
  50. Notebooklm Web Importer

    ntebooklm

    Clean

    Notebooklm Web Importer sends selected page and link URLs to NotebookLM when adding them as sources.

  51. ostendo-%E2%80%93-capture-beautif

    kabirverman

    Low

    Ostendo sends YouTube feature-use events with a persistent extension client ID to Google Analytics.

  52. PaTMa Property Insights

    PaTMa

    Clean

    PaTMa Property Insights sends property listing URLs and page HTML from supported property sites to app.patma.co.uk.

  53. Pinterest Pin Stats - Sort Pins

    pin.analyzer

    Low

    Pinterest Pin Stats - Sort Pins validates saved license keys with InsightPins.

  54. Popup Blocker - block pop up requests

    PopupBlocker

    Low

    Popup Blocker injects a hidden, id-tagged element into every page it runs on, letting any site detect that it's installed.

  55. profittree-%E2%80%93-etsy-seller

    ProfitTree

    Low

    ProfitTree lets scripts on Etsy search pages read whether you are signed in to the extension.

  56. QUITTR - Porn / Adult Blocker, Block Sites

    QUITTR

    Low

    QUITTR redirects blocked adult-site visits to a page that loads Google Fonts plus Apple and Wikimedia badge images.

  57. RecipeSearch

    AdsSquared LLC

    Medium

    RecipeSearch force-navigates the user's active tab to its own landing page immediately after install, with no user action.

  58. SEO Checker Tool - Get Free SEO Audit Analysis

    SEO Tester Online

    Clean

    SEO Checker Tool opens an SEO audit page that includes the current tab URL encoded in the path.

  59. Save my Chatbot - AI Conversation Exporter

    Hugo COLLIN

    Clean

    Save my Chatbot can send exported AI conversation page content to a user-configured webhook.

  60. Search by image on Amazon

    Productsearch

    Medium

    Search by image on Amazon sends visited page URLs to apiheaven.io and may redirect a tab through apiheaven.io/pulse.