Is Yshot Youtube Screenshot safe?

Low risk

Yshot Youtube Screenshot lets any page trigger its YouTube-frame screenshot action through an unchecked message bridge.

The extension's content script runs inside YouTube frames and listens for a yshot_takescreenshot message without checking where it came from. A page that embeds a YouTube video can send that message to make the extension capture the current video frame, then save it as a download or write it to the clipboard depending on the extension setting.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

Yshot - Youtube screenshotv1.0.2Chrome Web Store
17Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 1.0.2. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on every site you visit

    <all_urls>

  • Schedule its own background tasks

    alarms

  • Write to your clipboard

    clipboardWrite

  • Run its own code inside the pages you visit

    scripting

  • Store data in your browser

    storage

Updated 30 September 2026bkgepfjmcfhiikfmamakfhdhogohgpac