Is Salesforce Log Inspector safe?

Clean risk

Salesforce Log Inspector reads your Salesforce sid cookie to fetch selected Apex debug logs from Salesforce.

When you click Analyze on a Salesforce Apex Trace row, the extension reads the sid cookie for that Salesforce host and opens its local analysis page with the session id and log id. The page uses that session as a Bearer token to request the selected ApexLog body from Salesforce's REST API for parsing in the extension.

nisarahmad.ajmer@gmail.comv1.0.8Chrome Web Store
1Risk
Who publishes it

nisarahmad.ajmer@gmail.com - 1 other listing from the same operator, none carrying a finding

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
nisarahmad.ajmer@gmail.com
Website
nisar-99.github.io/salesforce-log-inspector

Same store account

1 other listing published from this account, 100k+ users between them, none of them carrying a finding.

Lightning Studio100k+Medium

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 1.0.8. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on salesforce.com

    https://*.salesforce.com/*

  • Read and change your data on salesforce-setup.com

    https://*.salesforce-setup.com/*

  • Read and change your data on visual.force.com

    https://*.visual.force.com/*

  • Read and change your data on vf.force.com

    https://*.vf.force.com/*

  • Read and change your data on lightning.force.com

    https://*.lightning.force.com/*

  • Read and change your data on cloudforce.com

    https://*.cloudforce.com/*

  • Read and change your data on visualforce.com

    https://*.visualforce.com/*

  • Read and change your data on sfcrmapps.cn

    https://*.sfcrmapps.cn/*

  • Read and change your data on sfcrmproducts.cn

    https://*.sfcrmproducts.cn/*

  • Read and change your data on salesforce.mil

    https://*.salesforce.mil/*

  • Read and change your data on visual.force.mil

    https://*.visual.force.mil/*

  • Read and change your data on vf.force.mil

    https://*.vf.force.mil/*

  • Read and change your data on lightning.force.mil

    https://*.lightning.force.mil/*

  • Read and change your data on cloudforce.mil

    https://*.cloudforce.mil/*

  • Read and change your data on visualforce.mil

    https://*.visualforce.mil/*

  • Read and change your data on crmforce.mil

    https://*.crmforce.mil/*

  • Read and change cookies, including the ones that keep you signed in

    cookies

Where it sends data

Destinations our analysis observed Salesforce Log Inspector contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • *.salesforce.com

    Salesforce Log Inspector sends data to *.salesforce.com. One other extension we have analysed sends data here.

Updated 30 September 2026jebmhhcaiafpcjneboknfkmijegiihoe