Low risk browser extensions

The extension records form fields and request details for PDF-producing web requests across HTTP(S) sites.

SeaMeet syncs Google Calendar event details to meet.seasalt.ai using tokens accepted from page messages.

Sesli Sözlük Dictionary removes frame-blocking headers and sends selected text to its translation API.

Side Browser removes security headers from embedded pages opened in browser subframes.

SiteArmor - Malware Protection lets any website open its warning page to allowlist an attacker-chosen domain.

Sketch loads remote Linang Data content into its popup and can open returned links when clicked.

Smallppt removes Content-Security-Policy and X-Frame-Options headers from broadly matched HTTPS responses.

SnapMagic sends product page identifiers and the page URL to SnapEDA when it recognizes supported parts pages.

Snip - Remove Web Elements sends visited page URLs, titles, and referrers from broad content scripts to Google Analytics.

SourceBreaker App lets any website trigger browser notifications through its page message bridge.

Sports Car Live Wallpaper sends custom shortcut URLs to Google's favicon service on the new tab page.

SroDotNetActivator bridges any web page containing a specific DOM marker element to a locally installed .NET native messaging host.

Sticky Notes Tab sends submitted new-tab search terms to stickynotestab.com.

Stonly Browser Extension injects its widget storage into any frame whose URL contains stonly-stat-id.html.

Stopwatch app sends install and stopwatch usage events to Google Analytics with a persistent client ID.

Store Detector sends your public IP address to api.ipify.org when it detects a Shopify storefront.

Stray Kids HD Wallpaper New Tab replaces new tabs and includes code to fetch video backgrounds from mlionltd.github.io.

Streaming Skipper works with Paramount Plus sends Paramount profile, watch, subscription, and account details to its servers.

Subtitle Downloader lets page scripts on streaming sites ask the extension to fetch allowed cross-origin URLs.

SugarQC rewrites invite and referral codes on supported shopping-agent sites and queries QC photos for CNFans products.

Suno Manager captures Suno authentication tokens from Suno pages and stores them in browser sync storage.

Super Cars HD wallpaper video backgrounds embeds API credentials and sends consented analytics events to Google Analytics.

Supersana.io for Asana sends your Asana account name, email, and the machine's public IP to its own backend on every app.asana.com visit.

Tab Rename Wiz caches each visited page's URL, title, domain, path, and meta description in local browser storage.

Tab-Save sends every open tab title and URL to its configured remote endpoint.

TabMark-Bookmark New Tab renders your bookmark titles and URLs into every site you visit.

TabRevive lets any web page switch on its keep-alive page patches through a replayable postMessage bridge.

Tailo sends the active tab URL to Jina and Firecrawl when you add or check a page.

Teleparty-pro sends each HTTPS page's final URL path segment to redirect.teleparty.pro during navigation.

Temu Images Downloader sends signed-in user profile identifiers from its popup to Mixpanel analytics.

Tetri. Classic Brick Game rewrites the User-Agent header on all main-frame navigations in narrow browser windows.

Todo Tab sends Amazon search terms and discounted product URLs to Google Analytics with a persistent client ID.

Track Your Order sends new-tab search queries to trackyourorders.net for autosuggest results.

Tracked for Basecamp stores its Tracked auth token in Basecamp page localStorage and sends it with Tracked requests.

TradeWiz Extension sends viewed X.com profile usernames to extension.tradewiz.ai when you visit profiles.

Translator for Discord Web sends translated Discord text to SiliconFlow using an embedded default API credential.

UI Kits for Wix Editor accepts Wix editor messages that write supplied component data to local storage and clipboard.

Urban Shield VPN lets any clicked webpage link add and select a custom DNS server for the VPN connection.

VR Dashboard I.T.Y.C. records Virtual Regatta fleet, rank, and option data to vr.ityc.fr by default.

Video Hızlandırcı loads Google Fonts stylesheets when its popup opens.

Vouch Verifier replaces CSP headers on Facebook, Instagram, and QuickBooks pages to allow inline and eval scripts.

Voys Klik-en-bel lets pages trigger click-to-dial calls through the signed-in Voys account.

WAExpresso sends your WhatsApp number, extension ID, and usage counters to its license server.

Window AI trusts page-supplied origin metadata, letting sites reuse previously allowed AI permissions.

Wizzwoods removes Content-Security-Policy and X-Frame-Options headers on Twitter/X pages and frames.

WormWorld Connect Light redirects Wormate's game script to a WormWorld-hosted replacement.

X-Alpha sends scraped X/Twitter tweet and profile details to its AWS backend.

XPaint image editor and painter sends non-OffiDocs tab URLs to OffiDocs with a persistent local user ID.

Zopi loads Google Fonts from content scripts that run on every visited page.

iCloud Hide My Email lets any webpage trigger alias generation and reservation through its injected email-field bridge.

pixiv smart downloader lets any website trigger its saved Pixiv image ZIP download workflow.

uGet Integration intercepts downloads and passes cookies and POST form data to the locally-installed uGet download manager via native messaging.

view xml file | XML Formatter lets page scripts open an extension tab with detected XML content.

VPN ZERO supplies bundled SOCKS proxy credentials to vpnzero.ru proxy servers when its VPN is enabled.

The extension opens a remotely configured homepage tab after install or update.

Download Facebook Videos rewrites Facebook and fbcdn request headers for requests started outside Facebook.

I.CA PKI Service Component forwards requested cookie values from matched websites to its native PKI host.

DjVu.js Viewer lets any website trigger extension-privileged DjVu loading and render cross-origin documents into the page.

Yahoo Search Addon sends a persistent client ID and browser environment details to Yahoo on install and every four hours.

Language Reactor exposes extension storage to the active page after its text-mode content script is injected.