Is Read Aloud: A Text to Speech Voice Reader safe?
Read Aloud accepts playback control commands from any installed Chrome extension without validating the sender.
The extension registers an onMessageExternal listener that allows any other installed Chrome extension to trigger text-to-speech actions—including injecting the player frame into the active tab and speaking arbitrary text—without checking the sender's identity. Because no externally_connectable restriction is declared, any extension can invoke play, pause, stop, or resume commands by sending a message to Read Aloud's extension ID. This means a separate installed extension could cause Read Aloud to speak attacker-supplied text in any active tab.
Part of this rating comes from analysis signals we haven't published as detailed findings yet.
Who publishes itBusiness - 1 other listing from the same operator, none carrying a finding
Business - 1 other listing from the same operator, none carrying a finding
What this publisher told the store about itself, and the other listings that told it the same thing.
Same store account
1 other listing published from this account, 2k+ users between them, none of them carrying a finding.
Shared hosts - 1 hostname
Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
What it can do
Permissions this extension asks for, as declared in version 2.22.0. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to. The current listed version is 2.24.0, which we have not unpacked yet.
Read and change your data on translate.google.com
https://translate.google.com/
Act on the current tab, but only after you click the extension
activeTab
Add items to the right-click menu
contextMenus
Sign you in with your Google account
identity
Run hidden pages in the background
offscreen
Run its own code inside the pages you visit
scripting
Store data in your browser
storage
Speak text aloud
tts