Is Chromium browser automation safe?

Low risk

Chromium browser automation records user interactions including password field values and replays them by executing caller-supplied scripts in page context.

The extension operates as a browser automation tool: it records clicks, form changes, and blur events across all HTTP/HTTPS pages, capturing password field values during recording sessions and storing them locally as part of playback state. During playback it injects caller-defined JavaScript into the MAIN world context of any covered page. The extension also sends a persistent anonymous UUID to Google Analytics each time the service worker starts.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

saroyanmv10.0.1Chrome Web Store
20Risk
Who publishes it

saroyanm - 2 other listings from the same operator, none carrying a finding

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
saroyanm

Same store account

2 other listings published from this account, 16k+ users between them, none of them carrying a finding.

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 10.0.1. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on every site you visit

    http://*/*

  • Read and change your data on every secure site you visit

    https://*/*

  • Read and change cookies, including the ones that keep you signed in

    cookies

  • See the address and title of every tab you have open

    tabs

  • Store data in your browser

    storage

  • Run its own code inside the pages you visit

    scripting

Where it sends data

Destinations our analysis observed Chromium browser automation contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • www.google-analytics.comwidely used

    Chromium browser automation sends data to www.google-analytics.com. A widely used service: 388 other extensions we have analyzed send data here.

Updated 30 September 2026jmbmjnojfkcohdpkpjmeeijckfbebbon