Clean risk browser extensions

Translator for WhatsApp™ Web includes a fallback SiliconFlow API key and sends it as request credentials.

Control Spotify desktop playback from a browser extension without switching windows.

URL Extractor collects hyperlinks from each HTTP or HTTPS page you open and saves them in extension-local storage.

UiPath Browser Automation reads and modifies content on any page under the control of the local UiPath Studio desktop app.

Umbrella - Copy All URLs copies open tab titles and URLs to the clipboard when you trigger its copy action.

UserGuiding - Better User Onboarding runs its editor on all sites and loads project data from UserGuiding APIs.

VPN Germany - Planet VPN lite Proxy decrypts vendor proxy credentials from vqols.cc with an embedded key.

View Once Plus modifies WhatsApp Web view-once messages so they can be opened again.

View Recipes sends typed new-tab search queries to viewrecipes.net for autosuggestions.

View Templates sends typed new-tab search terms to viewtemplates.com autosuggest endpoints.

Replaces the default new tab with a customizable visual bookmarks page.

WA Self Sender sends your WhatsApp number and daily send count to bkd.pdfy.cloud over HTTP.

WA Web Plus sends selected WhatsApp message text to Google Translate when you use its translation tool.

Reads webpages, Gmail, and Google Docs aloud with highlighting and study tools.

Webex Calling for Chrome scans the text of every page you visit to detect phone numbers and turn them into click-to-call links.

Wikiped Today sends searches from its new-tab page to wiki.wikiped-today.com with a fixed tracking ID.

The extension sends X/Twitter page URLs, account email, settings, and persistent IDs to xcontentbackuptool endpoints.

XPath Tester reads matching page text into its side panel when you evaluate an XPath.

This extension generates text transcripts from YouTube videos.

YouTube Video Transcript sends YouTube video IDs and transcript or summary requests to yt-to-text.com.

Youtube to Transcript injects a script into the active tab letting its vocabulary.live iframe read and write the page DOM and localStorage.

This extension highlights web pages and PDFs with notes and a searchable research library.

Zomato & Swiggy Spending Calc - Snackalytics reads food-delivery cookies to analyze order history locally.

adirah captures the active tab screenshot and sends it to adirah.ai for chart analysis.

Save web images, videos, audiobooks, and selected text directly to a pCloud account from the context menu.

Generates PDFs with one click and opens them in the pdfMachine viewer.

shortfuts sends EA Ultimate Team search result player IDs, prices, and timers to FUT Alert when search automation runs.

svg-grabber reads SVG markup and the source page title and URL after you click its toolbar button.

Обход блокировки YouTube routes YouTube-related traffic through a remotely selected proxy.

The Quark AI assistant reads cookies and HTTP headers from all websites and forwards them to the locally installed Quark desktop app.

This extension shows Rakuten product price history graphs and supports price drop notifications.

百度AI—浏览器助手 sends selected page text and page-summary URLs to Baidu Chat when its AI actions are used.

知虾选品助手-Shopee虾皮大数据分析插件 sends Shopee product and listing API responses to a menglar.com endpoint.

BaekjoonHub ships a hardcoded GitHub OAuth client_secret that any user or actor can extract from the extension bundle.

Kee captures form credentials from every web page and disables the browser's built-in password manager.

PhishWall reports every tab URL to a local desktop agent and injects a persistent identifier into requests to Japanese banking sites.

Instapaper uploads page content, URL, title, and selected text to its own servers when the user saves a page.

Knockoff - Amazon Brand Filter fetches remote brand lists and sends user-submitted Amazon product reports to its API.

FoE - Helper uploads in-game profile and building data to api.foe-rechner.de when GlobalSend is enabled (on by default).

Blocks access to Pix-prohibited websites during certification tests.

PDF Mage transmits the full HTML content of the active page to pdfmage.org when a user triggers PDF conversion.

Browsing Protection by WithSecure forwards every visited URL to a locally installed WithSecure security app for reputation scanning.

AB Download Manager Browser Integration forwards cookies and request headers for download URLs to the locally installed desktop app.

Bypasses age verification forms on supported sites including Reddit, AliExpress, Agechecker, and Ageverif.

Paywall remover 2025 sends the user's current page URL to removepaywalls.com when the toolbar button is clicked.

SoundCloud Downloader intercepts SoundCloud API credentials from the browser to authenticate its own track-download requests.

AVG AntiTrack instruments every HTTP(S) page to detect and suppress tracker fingerprinting APIs.

RoGold - Level Up Roblox sends visited Roblox user IDs and collectible asset IDs to rogold.live to power its preview and trading features.

AdGuard Browser Assistant forwards the current tab URL and port to the AdGuard desktop app via native messaging on each tab switch.

ESEP Crypto relays page-supplied data from content scripts to local native messaging hosts without input validation.

Rakuten Button Canada sends browsing session events and order confirmation page HTML to Rakuten servers on merchant sites.

Skip Redirect intercepts navigation requests to extract and follow embedded destination URLs, bypassing intermediary redirect pages.

Flag Cookies reads cookies and localStorage from every visited site to display them in its popup, with no observed remote transmission.

Px Downloader modifies CORS headers on Pixiv's image CDN to enable cross-origin downloads from pixiv.net pages.

The javascript extension lets users store custom JavaScript per domain and injects it into every page on that domain on each navigation.

Joko transmits full merchant page URLs and shopping events with persistent user and device IDs to its servers and Amplitude.

AdGuard VPN can disable other installed proxy or VPN extensions when the user triggers conflict resolution.

Sticky Password intercepts WebAuthn API calls and disables the browser's built-in password manager, routing credentials via its native app.

This extension helps you sign in with passwords stored in the 2FAS Pass mobile app.

50キーボード sends text entered in its popup to Google Transliterate to generate Japanese conversion candidates.