Low risk browser extensions

The extension lets any website open an incognito popup to a page-chosen URL.

YouTube Ad Skipper stores ad-skip and hidden-banner counters in YouTube page localStorage.

YouTube Detoxifier sends anonymous click analytics to its Azure-hosted server when timers or settings are used.

YouTube Genius fetches Genius embed code and injects Genius-delivered scripts into YouTube pages.

YouTube Productivity Filter sends YouTube video IDs to Google APIs while checking watch pages.

YouTube Remote lets anyone with the six-letter pairing ID control playback and receive media metadata.

YouTube Transcript Generator loads a remote image from statics.imgkits.com on YouTube watch pages.

Youtube Channels To CSV displays message HTML fetched from its Firebase database inside the extension popup.

Youtube Party opens a Socket.IO connection to redirect.youtubeparty.com on YouTube page loads.

Youtube Video Summary sends YouTube transcripts and video metadata to ChatGPT for automatic summarization.

Zenitsu Agatsuma Live Wallpaper sends saved new-tab shortcut URLs to Google's favicon endpoint.

Zintlr Sales can send full page HTML from pages with LinkedIn-style URL paths to extension.zintlr.com.

Zistemo extension sends a bundled API key with requests to api.zistemo.com.

Zotero DOI PDF Finder loads remote Bootstrap CSS from StackPath when its popup opens.

[Amazon] show price without fees sends the signed-in user's saved email to amzshowpricenofee.com on page navigation.

akaBiz Zalo exposes its popup to any site, letting framed pages trigger Zalo contact, group, and tag syncs to app.akabiz.net.

bilibili Ads Remover exposes custom Bilibili filtering keywords to scripts on Bilibili dynamic and profile pages.

chatvideo sends Bilibili video IDs and extracted subtitle data to www.chatvideo.cc.

click to call requests your public IP address to create a persistent uniqueId for its service.

dLcompare sends game and search terms from matched websites to dlcompare.com for price comparison.

e-Cert Extension lets vendor sites and other extensions pass method payloads to a Hongkong Post native signing host.

etailinsights Shopping Cart Analyzer sends the active site URL and a browser fingerprint hash to api.etailinsights.com.

griffel-devtools marks every page frame in sessionStorage when it runs on all URLs.

iByzPaint Editor fetches remote rules that can cover popular websites with a fake browser-support download overlay.

iPanopto accepts RSS video lists from any active-tab URL containing panopto.com and downloads the listed files.

insidebar.ai lets framed AI provider pages receive webpage messages that write text into their prompt boxes.

lavender | new tab sends precise coordinates to OpenWeatherMap when its new-tab weather feature is used.

mpstats.club forwards Wildberries supplier contact phone numbers and supplier IDs to plugin.mpstats.club.

msgboxx opens an authenticated WebSocket to wsapi.msgboxx.io from each visited top-level page.

n8n extension for Chrome loads its popup icon stylesheet from unpkg.com when the popup opens.

nTab signs its ntab.dev API requests with a hardcoded key embedded in the extension.

nVampeta replaces images on every website with remote Imgur images, causing browsing-time requests to i.imgur.com.

nuTab sends saved bookmark hostnames to icon.horse when it loads remote favicon images.

pipebox stores a page-supplied token as its account token and sends it to api.pipebox.pro.

sip lets any HTTPS page read its wallet settings through a hardcoded bridge namespace.

studyfoc.us lets any website enable time-spent tracking and forward visited hostnames to StudyFoc.us pages.

tab.pics fetches new-tab photo metadata over HTTP from tab.pics for the selected subreddit.

thegivingmachine sends matched shopping-site visits to Google Analytics.

tjekpånettet.dk sends each visited site's host to ScamAdviser for reputation scoring.

vtexSnitch inventories marketing and VTEX request URLs and pixel IDs on every website you visit.

xBull Wallet lets webpages request wallet connection and public-key access through its injected browser bridge.

zipBoard removes CSP and X-Frame-Options protections from every top-level and embedded page it can match.

zkID Wallet lets web pages query whether the wallet is locked.

The extension routes ChatGPT-related sites through hardcoded or remotely configured proxy servers.

Молния VPN includes its premium-token signing key in the extension, allowing local PRO entitlement tokens to be generated.

Поиск по фото на Wildberries sends page URLs, titles, and referrers from all sites to Google Analytics.

Я.Кликер sends selected or current-page URLs to lnk.name for link shortening.

免费在线视频下载器Plus removes Facebook X-Frame-Options headers from every facebook.com response.

月亮树MoonTree极速调价插件 stores saved MoonStatistics credentials and user tokens with a hardcoded in-bundle password.

特卖选品 - TemuFilter lets Temu pages request its Chrome extension ID through an injected page bridge.

The extension sends watched stock codes to qt.gtimg.cn from its popup and options pages.

虾秘- Shopee虾皮达人邀约工具 lets Shopee seller pages fetch arbitrary URLs through its background worker.

行云-plugin loads JD employee profile and ticket workflow data over cleartext HTTP.

视频速度控制器 video speed controller conditionally routes Chrome update checks through agency.pictureknow.com.

讀 Extension lets any webpage ask the extension to read selected or page text aloud through Chrome text-to-speech.

讯飞同传AI悬浮字幕插件 writes its runtime ID into the page DOM after opening its panel.

超强AliExpress速卖通类目查询 inserts remote HTML from rangtaobaofei.com into AliExpress item pages.

超强科技TM自动抢库助手 reads a Temu seller mallid request header and sends it to da.rangtaobaofei.com.

速蜂工具箱-Tiktok-商品机会词，清理无流量 sends page URLs and referrers from TikTok, TikTok Shop, and Baidu pages to Aliyun RUM.

이세돌 뱅온 예약기 sends the user's heart-points totals and optional nickname to Firebase every hour.