Is GroupKii™ safe?
GroupKii rewrites the Origin and Referer headers to facebook.com on any tab's request to a facebook.com URL, not just its own.
GroupKii is a Facebook Groups management tool that automates tasks like accepting join requests and scheduling posts by calling Facebook's internal API from its background worker. To make those calls pass Facebook's server-side checks, it installs a declarativeNetRequest rule that force-sets the Origin and Referer headers to facebook.com/web.facebook.com. The rule has no scoping to the extension's own requests, so it also rewrites those headers on XMLHttpRequests made by any other open tab or site to a facebook.com URL.
Part of this rating comes from analysis signals we haven't published as detailed findings yet.
Who publishes itQwertyFace Media, LLC - 3 other listings from the same operator, 2 of them carrying a finding
QwertyFace Media, LLC - 3 other listings from the same operator, 2 of them carrying a finding
What this publisher told the store about itself, and the other listings that told it the same thing.
Same store account
3 other listings published from this account, 6k+ users between them. 2 of them carry a finding.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
What it can do
Permissions this extension asks for, as declared in version 2.0.12. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.
Read and change your data on facebook.com
https://*.facebook.com/*
Read and change your data on messenger.com
https://*.messenger.com/*
Read and change your data on i.imgur.com
https://i.imgur.com/*
Read and change your data on groupkii.cloudki.io
https://groupkii.cloudki.io/*
Read and change your data on localhost:5002
http://localhost:5002/*
Store data in your browser
storage
See the address and title of every tab you have open
tabs
Show you desktop notifications
notifications
Block and redirect the requests your browser makes
declarativeNetRequest
Read whatever you have copied to your clipboard
clipboardRead
Sign you in with your Google account
identity
See the email address of your Google account
identity.email