Low risk browser extensions

WAPI Extractor sends WhatsApp Web page details and a persistent client ID to Google Analytics.

Windowed Fullscreen for Videos lets embedded frames send commands that control the page's video overlay.

WordsMine sends tokenized page text to api.wordsmine.com when remote highlighting is enabled.

Yeah! for Twitter sends visible tweet IDs to its API while you browse Twitter/X.

Zip Extractor sends archive-button click telemetry with a persistent analytics device ID to Amplitude.

Zoof by Amazing Intelligence reads Seller Central order rows and sends them to ai.amazing.com for repeat-buyer checks.

hektCaptcha downloads captcha-specific ONNX models from hekt-static.akmal.dev to automate challenge clicks.

orfline sends ORF TVthek page URLs to orfline.at when matching pages load.

paperGuard sends page URLs and scraped publication text from recognized paper-search pages to its ranking API.

wikifx sends every visited URL with a persistent user ID to pluginapi.chajianapi.com.

The extension installs remotely fetched request-blocking rules that can apply across all websites.

الموفر reports coupon-page views and interactions to Google Analytics with a persistent extension ID.

FACEIT FORECAST can route FACEIT player and match API lookups through fforecast with a persistent device ID.

VKSaver sends VK page URLs and VK account IDs to dl1.audiovk.com when reporting errors.

Dark Mode - Night Eye lets any website trigger support messages sent with stored chat identity details.

Spoof Geolocation exposes stored spoofed location settings to any website and accepts unchecked location updates on its setup page.

signTextJS plus exposes a native signing API to every web page and auto-signs requests from file:// pages.

Video Download Helper records media URLs, page URLs, tab details, and request headers from sites it monitors.

YouTube Download sends supported media page URLs and a persistent extension identifier to unidlapi.ru.

Tabby Cat sends generated cat snapshots to tabbycats.club when you use its camera sharing feature.

WebHID for Firefox exposes a WebHID shim to every site and forwards approved HID reports to a local provider.

EuroSaver lets eurosaver.net request Amazon product pages and sends extracted product details back over a WebSocket.

PhishFinderAK sends blocked page destinations and deleted download filenames to a hardcoded Discord webhook.

Language Reactor exposes extension storage to the active page after its text-mode content script is injected.

DjVu.js Viewer lets any website trigger extension-privileged DjVu loading and render cross-origin documents into the page.

Download Facebook Videos rewrites Facebook and fbcdn request headers for requests started outside Facebook.

Alitools shopping assistant can send its full local extension storage to Alitools during storage errors.

I.CA PKI Service Component forwards requested cookie values from matched websites to its native PKI host.

55PBX Web Softphone lets any page message its content script to open or focus the 55PBX softphone window.

AI Leak Block monitors supported AI sites and pauses prompts or uploads when it detects a personal account.

AI SEO AEO Optimizer sends Google and Bing search terms and YouTube video tags to backend.seospyder.io.

AIKTP: All-in-One AI lets any website trigger its content script to open a new browser tab to a supplied URL.

Accops Native Client bridges web pages to a local native host (com.accops.hyplugin01) on any HTTPS origin serving a specific iframe filename.

Adblocker for Twitch sends install/update telemetry with a persistent UUID and IP-derived location to an Aliyun logstore.

Address Finder for Rightmove sends resolved property addresses and a stored user ID to a Supabase analytics endpoint.

AliExpress Image Search opens a hidden affiliate tab on AliExpress checkout and sends saved product image URLs to Thieve.

Faceseo links its own account cookie to the user's Facebook account cookie and sends both IDs to faceseo.vn.

AmzTrends sends Amazon page URLs and page contents to api.amztrends.com for product and search analysis.

Ateş Çocuk ve Su Kız 1 Orman Tapınağı sends a persistent extension UUID to yoki.games every two minutes.

Audio Booster works with Disney+ [QVI] sends Disney profile details and viewing activity to remote servers.

Audio Recorder lets websites embed its sidepanel and trigger Amplitude page and referrer telemetry.

Behance Image Downloader watches tab URLs and stores login-success parameters when matching URLs appear.

Better Discord Web unofficial loads a remote Flaticon image when its popup shows a Discord-site error.

BiRead sends visible page text from translated sites to Google, Microsoft, and BiRead translation endpoints.

ByNoGame Auto Trader imports Socket.IO code from cdn.socket.io into its privileged background service worker.

The extension bridges scoped bank and CA web pages to native messaging hosts, but accepts the host name from the caller without validation.

Cat Tab Cursor sends bookmark URLs to Google's favicon service and submits new-tab searches to cattabsearch.com.

Chat Exporter accepts Notion tokens from page messages and sends exported Gemini chats to Backrun's Notion API.

Chat and Meet for Google fetches remote message HTML from jitt.wwevents.fun and renders it in extension pages.

ChatGPT Prompt Plus loads a prompt-picker icon from Firebase Storage on ChatGPT pages.

ChatGPT Sidebar by cloudHQ reads ChatGPT session access tokens and stores the auth data in Chrome sync storage.

ChatGpt VPN - VPN for ChatGpt Ai routes selected domains through bundled proxy servers with hardcoded credentials.

ChessExpert lets matched pages request a visible-tab JPEG screenshot through its page-to-extension event bridge.

Christmas Wallpaper New Tab sends displayed top-site URLs to Google's favicon service on the new-tab page.

Click-to-call для MANGO OFFICE sends the active tab's domain to Mango Office servers each time a call is initiated.

Collage - Debate Card Cutter and Library imports clipboard HTML into its library and saves it for later restores.

CompanyCam rewrites Facebook, Instagram, and QuickBooks CSP headers to allow inline and eval scripts.

Convert PDF to Word redirects every new tab to the remote freepdfconversion.com converter page.

CoolStart loads third-party stylesheets and fonts whenever it opens its replacement new tab page.

Coursera Dual Subtitles sends Coursera page host, path, and title to Google Analytics when its subtitle overlay renders.