Low risk browser extensions

Gaugr for Claude.ai uploads Claude account metadata and usage history to gaugr.app for cloud sync.

Facebook Comments Exporter removes Content-Security-Policy headers on Facebook pages before injecting its scripts.

FelarisVPN sends signed proxy-list requests using API and cache keys embedded in the extension.

Fenerbahce SK Anasayfa - FB NewTab checks chrome-extesions.com at install time and can open a tab to a URL it returns.

Fillify lets webpages trigger AI field-filter requests that send form context and page details to the user's AI provider.

Finder Shopping sends a bundled API authorization token to Grow My Money endpoints.

Five Nights at Freddy Wallpaper sends Chrome top-site URLs to Google's favicon service on the new-tab page.

Five Nights at Freddy's Live Wallpaper sends new-tab shortcut URLs to Google's favicon service.

Five Nights at Freddy's Live Wallpaper sends user-added shortcut URLs to Google's favicon service.

Fiverr Quick View loads an ImageKit GIF on Fiverr pages, sending the page referrer and IP address with the request.

Flash Player can let sandboxed Flash content ask the extension to fetch arbitrary URLs.

Flash Player Emulator writes its extension runtime ID into page DOM classes during Flash emulation.

FlightSeats.io Reward Seat Finder sends flight and hotel search details from airline booking pages to FlightSeats cloud endpoints.

FlowX sends X/Twitter account lookups and login actions to api.rootdata.com.

Flower Finder sends your Chrome top-sites URLs to Google's favicon service when its new-tab page loads.

Fluentez-extension rewrites Origin and Referer headers on XHR requests sent to api.fluentez.com.

ForU AI embeds API signing credentials and uses them on authenticated requests to its ForU API.

Forex 24hr clock loads Google Fonts when its popup opens, disclosing popup-open network metadata to Google.

Formula1 Las Vegas Live Wallpaper sends saved shortcut domains to Google's favicon service on its new tab page.

Fortnite Cursor opens kinofilmslook.ru when users click its Rate Us control.

Fortnite Wallpaper sends Chrome top-site URLs to Google's favicon service on its new-tab page.

Forza Horizon 5 Wallpapers New Tab fetches notification HTML from api.gameograf.com for its new tab page.

Forzar Idioma en Google loads language flag images from FlagCDN when its popup shows Google language options.

Fotoexamen lets any website set its saved access token and sends screenshots to api.img2html.com for solving.

Frase sends selected page text to its AI rewriting endpoints when authenticated users invoke writing actions.

Free Logo Maker opens wixlogomaker.net with the logo text entered in its popup.

Free SEO Audit & Website Checker by Semalt can disable other installed SEO extensions based on a Semalt-hosted tag list.

Free VPN Chrome extension - VPN Proxy Streamix sends a persistent install ID, device profile, and country to Streamix and Google Analytics.

Freename Web3 Extension sends top-level website hostnames to Freename resolver APIs as you browse.

Frieren 4K Wallpaper sends stored new-tab shortcut URLs to Google's favicon service when rendering shortcuts.

Funlingo sends visible page text to Google Translate when you use its page translation feature.

Fushiguro Toji Hanging Jujutsu Kaisen Live Wallpaper sends saved shortcut URLs to Google's favicon service.

GAS Prettier + AI Completion injects a Perplexity socket bridge into Perplexity Labs pages.

GEE AI Assistant removes frame-protection headers from AI chat subframes across the browser.

GOFF - Login Automático lets matching .pt pages send commands that open supported portals and fill login forms.

GOTSUGO reports Google Calendar parser errors to Sentry with the page URL and browser request headers.

GPT Breeze includes a bundled Pollinations API key for its default free AI model.

GPT-BOSS lets any embedding page ask its panel to fetch an image URL and upload it to vkboss-light.super-smm.com.

GST Calculator Free loads Google Tag Manager when its popup opens.

Galaxy Wallpaper sends saved new-tab shortcut URLs to Google's favicon service.

Galaxy-Newtab sends each Chrome top-site URL to Google's favicon service when its new-tab page renders.

Garden Lake Minecraft Live Wallpaper sends shortcut URLs to Google's favicon service on its new tab page.

Gato en la Web injects Tenor-hosted cat GIFs into every HTTP and HTTPS page you visit.

Geo Hound uploads discovered GIS service URLs and the browsing page URL to Supabase with a persistent user ID.

German Pronouncer Extension injects an Imgur-hosted icon into pages you visit.

Get Full Text Research sends article details, institution IDs, page URLs, and an installation ID to GetFTR servers.

Get Weather Now sends automatic geolocation requests to ipinfo.io using a bundled API token.

Gimkit Hacker injects a persistent browser-warning banner on every visited page linking to gimvrowser.vercel.app.

GitHub Accelerator routes GitHub downloads through third-party proxy nodes whose 'integrity check' never verifies the downloaded file.

Gladiatus Helper Bot sends in-game private and guild message text to its Telegram webhook backend.

Glance sends PDF title candidates and the active tab title to BigModel when it renames PDF downloads.

Global Clock loads Font Awesome from cdnjs.cloudflare.com whenever its new-tab page opens.

Gmail Inbox Zero by cloudHQ collects Gmail account-switcher email addresses and sends them to www.cloudhq.net.

GoEmailTracker sends your Gmail address to its tracking domains when tracked pixels load or tracked links are clicked.

GoingMed sends journal names, PubMed IDs, and DOIs from academic pages to publication lookup services.

Goku Black Rose Transformation Live Wallpaper sends shortcut URLs to Google's favicon service on each new-tab render.

Goku Destined Live Wallpaper New Tab fetches remote popup HTML from Gameograf and inserts it into the new-tab page.

Goku Falling Stars fetches remote message HTML and inserts it into its new tab page.

Google Drive Dark Mode lets any page ask its background worker to fetch cross-origin stylesheets and insert the response.

Google Meet Meat injects a meetmeat.gmeetmeat.xyz iframe into Google Meet pages.