Low risk browser extensions

Readlax sends the active page hostname to Google's favicon service when reader mode renders the page.

Reverse Image Search opens Google reverse-image searches over HTTP with the selected image URL in the query string.

SEO Render Insight Tool loads a Google Fonts stylesheet into pages when its minimap is enabled.

SEO | ASO | Search Ranking & Keyword Tool sends the active tab URL and title to Google Analytics when opened.

SKLive聊天表情插件 posts Twitch channel panel HTML to sk-knower.com.

The extension records form fields and request details for PDF-producing web requests across HTTP(S) sites.

SeaMeet syncs Google Calendar event details to meet.seasalt.ai using tokens accepted from page messages.

Search by Image & Price Tracker for eBay sends each page's URL, title, and referrer to Google Analytics.

Send from Gmail opens a new tab to a URL returned by gmplus.io when the extension is installed.

Shopify Analyzer lets any website display the stored IXSPY account email in the page.

ShortKit listens for postMessage on TikTok/Douyin pages without checking the sender, letting any page trigger a cookie-included fetch.

Site Site Blocker exposes a short extension identifier in the page DOM on every site it runs on.

Spark SEO by seoClarity lets any web page trigger seoClarity API requests for the current tab URL with the stored token.

Spider Man Wallpaper sends your most-visited site URLs to Google's favicon service on its new-tab page.

Spider-Man: Across the Spider Verse Wallpaper sends top-site URLs from its new-tab page to Google's favicon service.

Stat4Market sends a shared hardcoded API auth token with its background requests to Stat4Market servers.

Store Detector sends your public IP address to api.ipify.org when it detects a Shopify storefront.

TeachShare Copilot sends visited page URLs and titles to TeachShare for educational-content classification.

TheGuarantors - Chrome Extension sends building-list requests to theguarantors.com with a bundled API key.

Thinlabs Kiosk writes device MAC address and internal network topology into localStorage on every page the browser visits.

Tool EOP sends EOP task questions, answers, course identifiers, and image URLs to Tool EOP backends.

TradeWiz Extension sends viewed X.com profile usernames to extension.tradewiz.ai when you visit profiles.

TuneFinder writes a persistent identifier into HTTP cookies for tunefinderapp.com during installation.

URL Auto Redirector redirects some matching HTTPS pages to HTTP versions using its enabled default rules.

UTSniper copies its bearer token into EA Web App localStorage where page scripts can read it.

UnInternet loads a remote Font Awesome stylesheet from cdnjs when its popup opens.

VK Saver automatically sends a page-load beacon from VK and aferon.com pages to aferon.com/stat.

Varia Integrator forwards download and active-tab URLs to a local aria2 JSON-RPC service.

Video Note & Screenshot forwards YouTube caption text from any tab to the connected Gemoo page.

Windowed Fullscreen for Videos lets embedded frames send commands that control the page's video overlay.

WordsMine sends tokenized page text to api.wordsmine.com when remote highlighting is enabled.

Yeah! for Twitter sends visible tweet IDs to its API while you browse Twitter/X.

Zip Extractor sends archive-button click telemetry with a persistent analytics device ID to Amplitude.

Zoof by Amazing Intelligence reads Seller Central order rows and sends them to ai.amazing.com for repeat-buyer checks.

hektCaptcha downloads captcha-specific ONNX models from hekt-static.akmal.dev to automate challenge clicks.

orfline sends ORF TVthek page URLs to orfline.at when matching pages load.

paperGuard sends page URLs and scraped publication text from recognized paper-search pages to its ranking API.

wikifx sends every visited URL with a persistent user ID to pluginapi.chajianapi.com.

The extension installs remotely fetched request-blocking rules that can apply across all websites.

الموفر reports coupon-page views and interactions to Google Analytics with a persistent extension ID.

Video Download Helper records media URLs, page URLs, tab details, and request headers from sites it monitors.

StayFree uploads your visited-site sessions and AI-chat usage metadata to api.stayfreeapps.com.

YouTube Download sends supported media page URLs and a persistent extension identifier to unidlapi.ru.

ChatGPT in Sidebar loads third-party stylesheets when its options page opens.

Language Reactor exposes extension storage to the active page after its text-mode content script is injected.

EuroSaver lets eurosaver.net request Amazon product pages and sends extracted product details back over a WebSocket.

signTextJS plus exposes a native signing API to every web page and auto-signs requests from file:// pages.

Tabby Cat sends generated cat snapshots to tabbycats.club when you use its camera sharing feature.

DjVu.js Viewer lets any website trigger extension-privileged DjVu loading and render cross-origin documents into the page.

I.CA PKI Service Component forwards requested cookie values from matched websites to its native PKI host.

Download Facebook Videos rewrites Facebook and fbcdn request headers for requests started outside Facebook.

Alitools shopping assistant can send its full local extension storage to Alitools during storage errors.

PhishFinderAK sends blocked page destinations and deleted download filenames to a hardcoded Discord webhook.

55PBX Web Softphone lets any page message its content script to open or focus the 55PBX softphone window.

AI Leak Block monitors supported AI sites and pauses prompts or uploads when it detects a personal account.

AI SEO AEO Optimizer sends Google and Bing search terms and YouTube video tags to backend.seospyder.io.

AIKTP: All-in-One AI lets any website trigger its content script to open a new browser tab to a supplied URL.

Accio rewrites Alibaba.com URLs with its affiliate parameters and opens affiliate tabs on Alibaba and AliExpress visits.

Accops Native Client bridges web pages to a local native host (com.accops.hyplugin01) on any HTTPS origin serving a specific iframe filename.

Adblocker for Twitch sends install/update telemetry with a persistent UUID and IP-derived location to an Aliyun logstore.