Low risk browser extensions

Scholar Utility Belt sends Google Scholar paper titles and URLs to CatalyzeX for code-link lookup.

Scratch Downloader records a page canvas in the active HTTPS tab and saves the video locally when the user starts recording.

Screen Recorder Pro uploads edited screenshots to imgbb when you use its screenshot upload button.

Screener specter sends Screener company-page visits and scraped financial document metadata to Firebase.

Screenshot & Bookmark Manager by Lasso exposes a screenshot page that accepts cross-site commands to upload saved screenshots.

Screvi sends selected text, page metadata, X bookmarks, and Kindle highlights to Screvi servers.

Search Box Focus loads remote icon stylesheets from Cloudflare cdnjs and Google Fonts when its popup opens.

Search My Currency sends new-tab opens with browser fingerprint fields and stored identifiers to webinline-usage.streamesh.net.

SearchAI sends new-tab searches and AI chat questions to its search and chat services.

SearchManualz routes default browser searches to SearchManualz and reports Yahoo page-load events with stored IDs.

Searchfz sends Chrome top-site hostnames to Google's favicon service on each new-tab page.

Secondary Screen lets pages with a meta tag move their popup browser window to a secondary display and fullscreen it.

Selenium Click Recorder lets any webpage start its all-sites recorder through an unauthenticated message.

SenangWasap sends WhatsApp phone numbers and selected chat text to SenangWasap AI services.

Send To Logseq lets web pages drive its injected UI to query or create pages through the local Logseq API.

Sessionat stores Google search queries and top result metadata in the browser's local extension database.

Share-it sends the active tab title or URL to selected sharing services over unencrypted HTTP when you click share buttons.

Shikiplayer embeds reusable video-provider API tokens and sends them to provider lookup APIs.

Ship.Cars Dispatch PDF Extension lets framed pages send messages that open Ship.Cars order creation or extension settings.

Shopee Tools - V3.2 sends full page HTML from every HTTP and HTTPS page to its extension runtime.

Shoplover embeds a RapidAPI key and sends Amazon ASIN and marketplace lookups to amazon-price1.p.rapidapi.com.

Shorts Flow loads Google Fonts from its popup, sending the user's IP address to Google font hosts when opened.

Shrek Live Wallpaper sends configured shortcut URLs to Google when rendering new-tab favicons.

Sign Search sends selected or typed search terms through a Heroku CORS proxy to sign-language search sites.

Simple AI Chat exposes a chat page that accepts web messages to open tabs and write clipboard text.

Simple Video Downloader lets any web page trigger a browser download through its content script.

Simpsons Bart Nirvana Live Wallpaper fetches remote popup HTML and injects it into its new-tab page.

The extension sends editable Gmail and Google Docs text to sinonimos.com.br for automatic spellcheck.

SiteBlock redirects visits to blocked sites to a hosted block page at not-today.gadfaria.com.

SiteBlocker sends blocked-site domains to PostHog when its rules match a page.

Sitecore Author Toolbox sends hashed Sitecore user email addresses to Gravatar on Experience Profile pages.

Sitecore Extensions lets any website read and change its extension storage through an all-page message bridge.

Skin|Chess.com has no confirmed data-recipient behavior in the reviewed records.

SkyMetric runs a Parcel hot-reload listener that accepts JavaScript updates from localhost on Kaspi product pages.

Slither IO Unblocked Game New Tab inserts game listings fetched from kavgamiz.com into its new-tab page.

Smart SEO sends the active tab's hostname with a persistent extension-generated user ID to Semalt.

SmartCustomer sends search result domains and its Sitejabber session cookie to Sitejabber's API.

Smartcare lets any webpage ask the extension to open an arbitrary URL in an incognito window.

SocialBook - YouTube Builder lets embedding pages request a canvas capture of the current YouTube video frame.

Socket Security sends package identifiers it finds in page links and code blocks to api.socket.dev.

Solana Rug Checker registers a browser device fingerprint with wiksi.org and sends token-search fingerprints from its popup.

Sora Video Downloader loads a cdnjs Font Awesome stylesheet on OpenAI and Sora pages.

Sorare NBA Jet sends remote-config-selected active-tab URLs to www.sorarenbajet.com for analysis.

Sound Up - Volume Booster 2023 requests a Google Fonts stylesheet when its popup opens.

SoundCloud Dark loads fixed Imgur images into SoundCloud pages through its injected stylesheet.

Space Spiders sends displayed bookmark URLs to Google and submits searches to search.spacespiders.net with stored identifiers.

Space Tab sends IP-derived location coordinates to its weather API when the new-tab page loads.

SpeechToText injects a hidden coindropster.com iframe on many popular websites.

SpeedMaster Pro lets any page message its frame script to modify timing APIs inside embedded cross-origin frames.

SplitPilot removes Content-Security-Policy and frame-blocking headers from all HTTP(S) responses.

Spotify Side Lyrics reads Spotify's lyrics page and mirrors the current lyric line in its side panel.

Spotube exposes its OAuth callback so websites can close the active tab and replace the stored Spotify token.

Squarestylist Selector Helper lets HTTPS pages trigger extension clipboard writes through an unchecked message handler.

Squid Game Cursor injects CSS cursor URLs containing its extension ID into pages after a cursor is enabled.

Stamp Wallet logs wallet recovery phrase material to the extension console during seed reveal.

Start Page - Date and Time sends weather lookup requests to OpenWeather from its weather widget.

Stash lets webpages trigger configured shortcuts that bookmark and close tabs.

Stay Focused sends configured website domains to Google's favicon service when showing site icons.

StealthHound lets webpages trigger spoofed fingerprint alerts through its page event bridge.

Stephen Curry Wallpaper sends most-visited site URLs from its new-tab page to Google's favicon endpoint.