Is The RSS Aggregator safe?

Low risk

The RSS Aggregator lets any website trigger extension-privileged requests to caller-supplied URLs.

Its public subscribe page reads a URL from the page query string and passes it to the background worker, which fetches that URL using the extension's broad host permissions. This can disclose the user's IP address and requested URL to whatever destination the calling page supplies.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

holden321v5.8Chrome Web Store
20Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 5.8. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on every site you visit

    <all_urls>

  • See the address and title of every tab you have open

    tabs

  • Watch every request your browser makes

    webRequest

  • Store data in your browser

    storage

  • Store an unlimited amount of data in your browser

    unlimitedStorage

  • See, disable and uninstall your other extensions, including your security ones

    management

  • Show you desktop notifications

    notifications

  • Run its own code inside the pages you visit

    scripting

  • Run hidden pages in the background

    offscreen

  • Act on the current tab, but only after you click the extension

    activeTab

Updated 30 September 2026ffhafkagcdhnhamiaecajogjcfgienom