Is Eagle - Save images faster than ever safe?

Low risk

Eagle includes a payment plugin that selects a payment method and auto-submits forms on Taiwanese payment gateway pages.

Eagle is a browser companion for the Eagle desktop app that lets users save images from the web. Bundled plugins run on specific Taiwanese payment gateway URLs (spgateway.com, ezpay.com.tw) and programmatically select a payment type radio button and submit the form once a CVC field appears in the DOM. A separate postMessage handler in the collect window accepts messages from any web origin without validating the source.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

AugusChenv3.1.19Firefox Add-ons
18Risk
Who publishes it

AugusChen - no other listings under this identity, 22 shared hostnames

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
AugusChen

Shared hosts - 22 hostnames

Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.

cdn.archilovers.com
Also called by 2 other listings
de.eagle.cool
Also called by 2 other listings
docs-en.eagle.cool
Also called by 2 other listings
en.eagle.cool
Also called by 2 other listings
es.eagle.cool
Also called by 2 other listings
gd-hbimg.huaban
Also called by 2 other listings
images-ng.pixai.art
Also called by 2 other listings, including Eagle
img.gameui.net
Also called by 2 other listings
jp.eagle.cool
Also called by 2 other listings
kr.eagle.cool
Also called by 2 other listings
officesnapshots.com
Also called by 2 other listings, including 花瓣采集插件-官方新版
oss-app.eagle.cool
Also called by 2 other listings, including Eagle
payment.ezpay.com.tw
Also called by 2 other listings, including Eagle
ru.eagle.cool
Also called by 2 other listings, including Eagle
archdaily.com
Also called by 3 other listings, including ArchDaily New Tab, Architecture Tab
cn.eagle.cool
Also called by 3 other listings
docs-cn.eagle.cool
Also called by 3 other listings
docs-tw.eagle.cool
Also called by 3 other listings
legacy.midjourney.com
Also called by 3 other listings, including Midjourney Archive Downloader
tw.eagle.cool
Also called by 3 other listings
image.gameuiux.cn
Also called by 4 other listings, including 花瓣采集插件-官方新版
st.hzcdn.com
Also called by 4 other listings, including Houzz Pro CRM for Gmail

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 3.1.19. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on every site you visit

    <all_urls>

  • Act on the current tab, but only after you click the extension

    activeTab

  • Add items to the right-click menu

    contextMenus

  • Store data in your browser

    storage

  • See the address and title of every tab you have open

    tabs

  • Block and redirect the requests your browser makes

    declarativeNetRequest

  • Run its own code inside the pages you visit

    scripting

  • See every page you navigate to, as you navigate to it

    webNavigation

Updated 2 November 2026amo-813997