Low risk browser extensions

JSX Preview loads preview-engine libraries from esm.sh and can add Tailwind's CDN while rendering JSX.

Lionel Messi MeaVana sends all-site content-script error telemetry to Glitchtip and account identifiers to PostHog.

Lister by Hustle Got Real sends signed-in users' active tab URLs to Hustle Got Real on navigation.

More Than 10 Shortcuts sends shortcut domains you enter to Google's favicon service.

Motorwatch - car price tracker sends vehicle marketplace search parameters to Google Analytics with a persistent client ID.

Nabox Wallet sends Twitter/X and Telegram profile identifiers to its Nabox ID lookup service during page navigation.

Onlinesim Access fetches proxy settings over plaintext HTTP and applies them to OnlineSim domains.

OpenLink Structured Data Sniffer accepts OIDC auth messages from any origin and stores them in extension storage.

Peek Pop: Link Preview lets embedded frames request and receive the top page's full URL.

PriceTip uses remote configuration to redirect matched page clicks through a Pedanto URL.

Raiz Rewards Browser Extension lets any website trigger a Raiz session API request through its content-script bridge.

Reeader imports a Google Fonts stylesheet when you activate its reader view on a page.

Sardoche-SardAlert checks YouTube video IDs with api.sardoche.tv and can route enabled Pandora traffic through its proxy.

Shot Crop loads replacement favicons from placehold.co when users change a site's tab color.

Snake Classic sends its popup page title, popup URL, and extension analytics identifier to Google Analytics.

Spaces loads remote stylesheets from BootstrapCDN and Google Fonts when its extension UI is opened.

Stylus Pressure bridges drawing stylus pressure data from Magma and Dessine web pages to a locally-installed native plugin via native messaging.

Tracker Blocker installs email-tracker blocking rules fetched from GMass.

Turn off sleep mode lets any HTTPS page trigger its keep-awake toggle through the injected sidebar.

IG Unfollow AI exposes an analyzer page that reads Instagram follower lists and sends avatar URLs to proxy.lazytech.workers.dev.

UnlockTube routes selected YouTube and Telegram domains through bundled proxy servers when its VPN mode is on.

Video to mp3 injects a page-accessible relay that lets any website open the extension's conversion tab.

Walles.AI lets any webpage trigger its Notion memo-sync bridge to send saved memo data to Notion.

Wordler loads Bootstrap CSS from cdn.jsdelivr.net when its popup or options page opens.

Zelix loads Google Fonts when its popup or side panel opens.

ZeratoR includes a fallback Google API key for a YouTube live-status check that its bundled channel list does not use.

ignore-x-frame-options removes X-Frame-Options and Content-Security-Policy headers from every page and frame response.

nextpage sends each visited HTTP or HTTPS page URL to nextpage.episage.com with a persistent extension token.

v2ex plus sends V2EX topic contents and liked replies to vdaily.huguotao.com when vDaily is enabled.

Enhancer lets Twitch and Kick page scripts request its saved settings and watchtime through a page bridge.

Yoroi sends matched browsing URLs with wallet addresses to api.bringweb3.io.

TopCashback UK Browser Extension sends shopping-page DOM snapshots to api.onsleek.ai during coupon detection.

GIPHY for Firefox sends popup GIF interaction telemetry to Giphy with a per-session tracking identifier.

Minimal Theme for X / Twitter sends clicked Twitter/X draft text and reply URLs to Typefully.

Free VPN USA - Planet VPN Proxy decrypts remote proxy credentials using a key embedded in the extension.

迅雷下载支持 forwards download URLs, referrers, and cookies from matching pages and downloads to the Xunlei native host.

Milanote Web Clipper lets allowed web pages request Milanote account state through its background bridge.

ChatGPT in Sidebar loads remote stylesheets from Cloudflare CDN and jsDelivr when its options page opens.

AI Chat Exporter preloads Google Fonts on supported AI chat sites, sending page-load request data to fonts.googleapis.com.

AI Homework Helper - Apex Vision AI sends selected text, cropped screenshots, and chat or file prompts to Apex Vision APIs.

Shield AdBlocker fetches a remote Google Sheets list and redirects matching browsing destinations through affiliate links.

AiPrice(AliPrice) Search by Image for AE Beta accepts spoofed webpage messages that can make it open attacker-chosen URLs.

Anime Girl Night Coffee Break Live Wallpaper fetches popup HTML from api.gameograf.com and inserts it into its new-tab page.

Anime Girl Wallpaper New Tab sends shortcut URLs to Google and adds an affiliate tag to Amazon navigations.

Anime Nook lets remote admincontrol.io settings choose where new-tab search queries are sent.

Avaya Cloud Office for Google lets allowed web pages queue click-to-dial or text actions through a broad message bridge.

Better Blackboard Learn sends discovered Blackboard course IDs to calbaptist.blackboard.com.

Better Classroom loads Google Fonts when the extension popup opens.

Better Roblox Badges lets page scripts start TranslateSub tab-audio capture after its content script is injected.

Better Roblox Badges sends Roblox profile IDs to api.jmk.gg and inserts returned badge names into Roblox pages as HTML.

BewlyBewly! Ave Mujica rewrites Origin and Referer headers on third-party POST requests to Bilibili API hosts.

Bookmarker by start.me accepts external messages that can navigate the active tab or open caller-provided URLs.

Boost Volume - Increase Volume Booster sends matching shopping and YouTube page URLs and titles to Google Analytics.

CFCA CertEnrollment.YZW Extension bridges web pages to local native messaging hosts using a caller-supplied host name with no allowlist.

CFCA CryptoKit.YZW Extension accepts a caller-supplied native messaging host name, allowing any whitelisted page to connect to any native application on the user's machine.

CNFans Warm Reminder Remover rewrites shopping product URLs on CNFans, Mulebuy, and Hoobuy to add referral codes.

CWS: Chinese Dictionary + Pinyin Annotator lets matched pages ask the extension to write page-supplied text to the clipboard.

Chartnote removes Content-Security-Policy headers from every top-level site you visit.

Clarie sends your approximate location to its weather service when the new tab page loads.

Cristiano Ronaldo - Cristiano Ronaldo HD wallpaper sends precise location coordinates to OpenWeatherMap for new-tab weather.