Low risk browser extensions

Video Note & Screenshot forwards YouTube caption text from any tab to the connected Gemoo page.

WAPI Extractor sends WhatsApp Web page details and a persistent client ID to Google Analytics.

Wandrer Map Overlay lets scoped route-planning pages read saved extension storage, including the user's Wandrer API key.

Windowed Fullscreen for Videos lets embedded frames send commands that control the page's video overlay.

WordsMine sends tokenized page text to api.wordsmine.com when remote highlighting is enabled.

Yeah! for Twitter sends visible tweet IDs to its API while you browse Twitter/X.

Zip Extractor sends archive-button click telemetry with a persistent analytics device ID to Amplitude.

Zoof by Amazing Intelligence reads Seller Central order rows and sends them to ai.amazing.com for repeat-buyer checks.

hektCaptcha downloads captcha-specific ONNX models from hekt-static.akmal.dev to automate challenge clicks.

orfline sends ORF TVthek page URLs to orfline.at when matching pages load.

paperGuard sends page URLs and scraped publication text from recognized paper-search pages to its ranking API.

wikifx sends every visited URL with a persistent user ID to pluginapi.chajianapi.com.

The extension installs remotely fetched request-blocking rules that can apply across all websites.

الموفر reports coupon-page views and interactions to Google Analytics with a persistent extension ID.

Auto Youtube Shorts Scroller loads Font Awesome stylesheets from cdnjs on its extension pages.

Midnight Lizard proxies blocked stylesheet URLs through its background page and exposes the returned CSS in the page DOM.

Rutracker Torrent Search routes rutracker.org pages through proxy servers loaded from remote server lists.

signTextJS plus exposes a native signing API to every web page and auto-signs requests from file:// pages.

Video Download Helper records media URLs, page URLs, tab details, and request headers from sites it monitors.

Dark Mode - Night Eye lets any website trigger support messages sent with stored chat identity details.

SEI++ exposes its extension runtime URL inside SEI page DOM nodes on matching .br sites.

VKSaver sends VK page URLs and VK account IDs to dl1.audiovk.com when reporting errors.

YouTube Download sends supported media page URLs and a persistent extension identifier to unidlapi.ru.

Tabby Cat sends generated cat snapshots to tabbycats.club when you use its camera sharing feature.

PhishFinderAK sends blocked page destinations and deleted download filenames to a hardcoded Discord webhook.

Alitools shopping assistant can send its full local extension storage to Alitools during storage errors.

Mapio sends Google search queries and stored identifiers to mpestate.azurewebsites.net after its consent flag is set.

Stock Tab lets tradeecon.com remotely change where new-tab search terms are sent.

55PBX Web Softphone lets any page message its content script to open or focus the 55PBX softphone window.

AI Leak Block monitors supported AI sites and pauses prompts or uploads when it detects a personal account.

AI SEO AEO Optimizer sends Google and Bing search terms and YouTube video tags to backend.seospyder.io.

AIKTP: All-in-One AI lets any website trigger its content script to open a new browser tab to a supplied URL.

Accops Native Client bridges web pages to a local native host (com.accops.hyplugin01) on any HTTPS origin serving a specific iframe filename.

Adblocker for Twitch sends install/update telemetry with a persistent UUID and IP-derived location to an Aliyun logstore.

AliExpress Image Search opens a hidden affiliate tab on AliExpress checkout and sends saved product image URLs to Thieve.

Faceseo links its own account cookie to the user's Facebook account cookie and sends both IDs to faceseo.vn.

AmzTrends sends Amazon page URLs and page contents to api.amztrends.com for product and search analysis.

Ateş Çocuk ve Su Kız 1 Orman Tapınağı sends a persistent extension UUID to yoki.games every two minutes.

Audio Booster works with Disney+ [QVI] sends Disney profile details and viewing activity to remote servers.

Audio Recorder lets websites embed its sidepanel and trigger Amplitude page and referrer telemetry.

Behance Image Downloader watches tab URLs and stores login-success parameters when matching URLs appear.

Better Discord Web unofficial loads a remote Flaticon image when its popup shows a Discord-site error.

BiRead sends visible page text from translated sites to Google, Microsoft, and BiRead translation endpoints.

The extension bridges scoped bank and CA web pages to native messaging hosts, but accepts the host name from the caller without validation.

Cat Tab Cursor sends bookmark URLs to Google's favicon service and submits new-tab searches to cattabsearch.com.

Chat Exporter accepts Notion tokens from page messages and sends exported Gemini chats to Backrun's Notion API.

Chat and Meet for Google fetches remote message HTML from jitt.wwevents.fun and renders it in extension pages.

ChatGPT Prompt Plus loads a prompt-picker icon from Firebase Storage on ChatGPT pages.

ChatGPT Sidebar by cloudHQ reads ChatGPT session access tokens and stores the auth data in Chrome sync storage.

ChatGpt VPN - VPN for ChatGpt Ai routes selected domains through bundled proxy servers with hardcoded credentials.

ChessExpert lets matched pages request a visible-tab JPEG screenshot through its page-to-extension event bridge.

Christmas Wallpaper New Tab sends displayed top-site URLs to Google's favicon service on the new-tab page.

Click-to-call для MANGO OFFICE sends the active tab's domain to Mango Office servers each time a call is initiated.

Collage - Debate Card Cutter and Library imports clipboard HTML into its library and saves it for later restores.

CompanyCam rewrites Facebook, Instagram, and QuickBooks CSP headers to allow inline and eval scripts.

Convert PDF to Word redirects every new tab to the remote freepdfconversion.com converter page.

CoolStart loads third-party stylesheets and fonts whenever it opens its replacement new tab page.

Coursera Dual Subtitles sends Coursera page host, path, and title to Google Analytics when its subtitle overlay renders.

Cristiano Ronaldo Wallpaper loads Google Fonts from its new-tab page on each new-tab navigation.

Dark Mode for YouTube™ exposes its extension ID and resource base URL to YouTube page scripts.