Low risk browser extensions

Custom Cursor for Chrome changes the cursor on every site and broadcasts its extension ID to pages.

Custom Cursors injects saved cursor styles into web pages using settings stored in the browser.

Customized subtitles, works with Disney Plus loads Google Fonts stylesheets on Disney+ pages.

Cyborg Tiger Live Wallpaper New Tab fetches remote popup HTML from api.gameograf.com and inserts it into its new-tab page.

D365 Finance & Operations Dev Tools reads the system clipboard into its popup fields when opened.

DHGate Real Photos loads a hidden sale.dhgate.com iframe on DHGate product pages every 30 minutes.

DL Boost sends cached Downloads-folder filenames and SHA-256 file hashes to dlboost.com.

DOMLogger++ lets any web page use its message bridge to open tabs, update tabs, show notifications, and queue log data.

DXF Viewer lets webpage scripts trigger extension-privileged fetches of page-chosen DXF links for dxfviewer.app.

DarkPDF sends visited page URLs to trhonx.com and can load URLs returned by its remote configuration.

Darkmode for Classroom injects CSS that loads replacement Google Classroom icons from svgshare.com.

Data Scraper disables page interaction and plays looping audio for Russian-language users on .ru, .su, and .xn--p1ai sites.

DataGrab runs Mixpanel tracking code on every HTTP and HTTPS page it can access.

Death Note Wallpaper sends custom shortcut URLs to Google's favicon service when rendering the new-tab page.

Delete Instagram Messages removes Instagram's Content Security Policy headers so its scripts can modify Instagram pages.

Demodesk: AI Meeting Analyst sends logged-in Demodesk profile details to Segment analytics.

Demon Slayer Characters HD Wallpaper New Tab sends saved speed-dial hostnames to Google's favicon service.

Demos Wallet lets any website request Demos identity lookups and sends those requests to demosnode.discus.sh.

Detectify Recorder sends recording auth tokens through page-visible frame messages that can write stored commands.

DevTools Suite exposes its extension ID to pages when Tailwind mode injects a page-visible script URL.

Dictation App sends a persistent user ID and dictation-use analytics to Amplitude.

Direct File Link Downloader lets any webpage prompt downloads for selected file-like URLs through its all-sites content script.

Discord Login with Token puts the entered Discord token in a discord.com URL and stores it in page localStorage.

DnD Beyond Kit fetches translation JSON from GitHub and uses it to replace text on D&D Beyond character pages.

Dodge Challenger SRT Hellcat Live Wallpaper sends new-tab shortcut URLs to Google's favicon service.

DogeUni exposes wallet public key, balance, and inscriptions to websites through its injected provider without approval.

Dolphin Browser for PC version - New Tab BG loads a stylesheet from unpkg.com whenever its new-tab page opens.

Doodle Jump Original silently allows browser notifications from playdoodleoriginal.digital.

Doodle Jump Popup loads popup font and image assets over plaintext HTTP from Google Fonts and Imgur.

Dork It loads its popup styling from jsDelivr and Google Fonts when the toolbar popup opens.

Double Click to Save Image lets any page trigger extension-privileged downloads from page-chosen image URLs.

Downloader for Loom exposes active download queue details to any web page through its content-script event bridge.

DragImages lets page scripts trigger downloads of image URLs through its all-pages drag handler.

Dragon Ball Gohan's Power Live Wallpaper sends shortcut URLs to Google's favicon service on the new-tab page.

Dragon Samurai Anime Boy Live Wallpaper sends saved shortcut URLs to Google's favicon service on each new tab page.

Dreamdata sends the active tab URL to Dreamdata when tabs change or finish loading.

DropMail.me injects a Google Fonts stylesheet into every HTTP and HTTPS page when its autofill menu is enabled.

Dubai Wallpaper sends Chrome topSites URLs to Google's favicon service when opening a new tab.

Duels de l'IA imports a government design-system stylesheet when you open Compar:IA pages.

EASY AGENTS rewrites Kakobuy and CNFans product-page URLs to add affiliate/referral identifiers.

ESPRIT Portal sends stored academic profile data and a persistent viewer key to remote ad endpoints.

ETH Ticker sends watched cryptocurrency market symbols to allcrypto.info over a cleartext price-feed connection.

EXPERIO lets any website write values that it later autofills into Moroccan tax portal login forms.

Easy Custom Autofill stores custom entries locally and loads Google Fonts and jsDelivr styles when its UI pages open.

Easy Share sends active-tab and top-site URLs to Google's favicon service on its new-tab page.

Easy for X exposes its extension ID to Twitter/X pages through injected UI links and images.

EbayGPT injects extension resource URLs into supported pages, making its installed extension ID visible there.

Edit anything - Boost any page sends page-provided email values to myexthub.com.

Eevee Pokemon Live Wallpaper fetches remote Gameograf popup HTML and renders it inside its new-tab page.

Elden Ring Wallpaper sends user-added shortcut URLs to Google's favicon service.

EloWard sends Twitch League of Legends viewing qualification tied to the stored Riot PUUID after a 5-minute watch threshold.

Email Tracking for Gmail by MailVibes sends Gmail feature requests to the MailVibes API with a bundled API key.

Enable Copy can send selected page text to Facebook GraphQL using the user's logged-in Facebook session.

Enhanced File Explorer for Chrome loads Google Fonts when it displays local file directory pages.

Enhancer for TextNow Web embeds a remote install page with clipboard read and write access.

Eren Yeager Live Wallpaper sends shortcut URLs to Google's favicon service when its new tab page renders.

Etsy Image Search sends selected image URLs to Yandex over a cleartext HTTP reverse-image-search URL.

Explain AI submits PDF document URLs to xplnai.com when a PDF opens in Chrome's viewer.

Extenship Application Launcher sends Amazon product dimensions and prices to a raw IP address over HTTP.

F.B Data Scraper - Posts, Comments copies full page HTML from every HTTP and HTTPS site into the extension.