Low risk browser extensions

Meteor DevTools Evolved lets any webpage ask the extension to open an arbitrary URL in a new browser tab.

Mockiato lets web pages query stored header profiles and mocks through its messaging bridge.

MyEasy86 sends clicked parcel submissions and product-page URLs from shopping sites to myeasy86.com.

NUSO Connect AC SIP relays arbitrary page messages to a local native host via a forgeable sender-string gate.

Octagon Find appends a persistent extension-generated session ID to searches sent to octagonfind.com.

One-Click TickTick sends the active tab URL, title, and readable page content to TickTick when creating a task.

Pali Wallet lets same-page messages trigger wallet network changes and lock the wallet.

Peacock TV Party sends Peacock account, profile, viewing, and customer email data to me3x.online and metricsmint.quest.

Peacock TV Speeder sends Peacock account, profile, viewing, and live-event data to external servers.

Periodic Table of Elements stores a browser client ID on Serbian government portal pages and sends it to Google Analytics.

Pixcall rewrites Referer headers and relaxes CORS for third-party image/CDN requests.

PoliPlanifica sends ESPOL course and professor names to apipr.robtrivi.com when academic planning pages load.

PowerPoint Translator uploads documents you pick to the developer's cloud storage for translation.

Premium Sender Pro sends your WhatsApp account number and usage telemetry to Google Analytics.

Proxy SwitchyOmega Pro looks up the user's IP address through ip-api.com on every matched page.

Quest PDF sends a generated persistent identifier to reporting.questpdfapp.com when it is installed.

Quick view for fiverr sends Fiverr seller country codes to flagsapi.com when showing country flags.

Quotes New Tab sends selected top-site domains to an Amazon S3 bucket when rendering its new tab logos.

RSS Feed URL Finder loads a remote font stylesheet from fonts.cdnfonts.com when its popup opens.

RecipeBox automatically sends detected recipe-page URLs from mobile pages to api.recipebox.com.

RepHunter sends Kakobuy order details, QC image links, and coupon redemption data to its servers.

Request X lets any website query user-configured response replacement bodies through its page event bridge.

Retire.JS downloads detector rules from GitHub and evaluates those rule strings in a sandbox while scanning page scripts.

Rick and Morty NewTab redirects every new tab to search.ricktab.com.

Roblox For Chrome sends your most-visited site URLs to Google's favicon service on its new-tab page.

The extension removes Content Security Policy headers from Google pages while it is active.

SLyrics sends Genius search terms with a bundled API token through files.xianqiao.wang.

SPOI Options fetches a patch manifest from lazlo.spoi.com and can load vendor-specified CSS into video pages.

SavvyCal sends location search text and selected coordinates to OpenCage for geosearch and geocoding.

Sesli Sözlük Dictionary removes frame-blocking headers and sends selected text to its translation API.

Side Browser removes security headers from embedded pages opened in browser subframes.

SiteArmor - Malware Protection lets any website open its warning page to allowlist an attacker-chosen domain.

Sketch loads remote Linang Data content into its popup and can open returned links when clicked.

Smallppt removes Content-Security-Policy and X-Frame-Options headers from broadly matched HTTPS responses.

SnapMagic sends product page identifiers and the page URL to SnapEDA when it recognizes supported parts pages.

Snip - Remove Web Elements sends visited page URLs, titles, and referrers from broad content scripts to Google Analytics.

SourceBreaker App lets any website trigger browser notifications through its page message bridge.

Sports Car Live Wallpaper sends custom shortcut URLs to Google's favicon service on the new tab page.

SroDotNetActivator bridges any web page containing a specific DOM marker element to a locally installed .NET native messaging host.

Sticky Notes Tab sends submitted new-tab search terms to stickynotestab.com.

Stonly Browser Extension injects its widget storage into any frame whose URL contains stonly-stat-id.html.

Stopwatch app sends install and stopwatch usage events to Google Analytics with a persistent client ID.

Stray Kids HD Wallpaper New Tab replaces new tabs and includes code to fetch video backgrounds from mlionltd.github.io.

Streaming Skipper works with Paramount Plus sends Paramount profile, watch, subscription, and account details to its servers.

Subtitle Downloader lets page scripts on streaming sites ask the extension to fetch allowed cross-origin URLs.

SugarQC rewrites invite and referral codes on supported shopping-agent sites and queries QC photos for CNFans products.

Super Cars HD wallpaper video backgrounds embeds API credentials and sends consented analytics events to Google Analytics.

Supersana.io for Asana sends your Asana account name, email, and the machine's public IP to its own backend on every app.asana.com visit.

Tab-Save sends every open tab title and URL to its configured remote endpoint.

TabMark-Bookmark New Tab renders your bookmark titles and URLs into every site you visit.

Teleparty-pro sends each HTTPS page's final URL path segment to redirect.teleparty.pro during navigation.

Temu Images Downloader sends signed-in user profile identifiers from its popup to Mixpanel analytics.

Tetri. Classic Brick Game rewrites the User-Agent header on all main-frame navigations in narrow browser windows.

Todo Tab sends Amazon search terms and discounted product URLs to Google Analytics with a persistent client ID.

Track Your Order sends new-tab search queries to trackyourorders.net for autosuggest results.

Tracked for Basecamp stores its Tracked auth token in Basecamp page localStorage and sends it with Tracked requests.

Translator for Discord Web sends translated Discord text to SiliconFlow using an embedded default API credential.

UI Kits for Wix Editor accepts Wix editor messages that write supplied component data to local storage and clipboard.

URL Decode/Encode loads banner and link HTML from linangdata.com each time the popup opens and inserts it into the page.

Udio AI Music Generator reads your Chrome profile ID and sends it to livepolls.app for extension login.