Is Story Saver safe?

Question

Accepted Answer

Story Saver is high risk. Each time you start your browser, Story Saver contacts ex.zework.com with a persistent identifier unique to your installation. On the first run, the extension generates a 25-character random string, appends your browser's language code, stores it, and sends it via a GET request using the ?id= parameter. On every subsequent startup, it retrieves the stored value and sends it again using the ?on= parameter. Our dynamic analysis captured this request live: GET https://ex.zework.com/?on=TWzOFYmRCW8Iv2dI4m46PDQDMen-GB. Every 60 seconds while Story Saver is running, the extension's service worker queries every open Instagram tab and injects a script to read a specific key from that tab's localStorage. If the value is present, it is removed from Instagram's localStorage and returned to the service worker context. Dynamic analysis confirmed this behavior: a planted marker value in an Instagram tab's localStorage was extracted and removed by the extension via chrome.scripting.executeScript, confirming the data leaves the tab.

Is Story Saver safe?

Findings