Extension Auditor
Extension Auditor
Sign Up
Asana

Asana

ID: khnpeclbnipcdacdkhejifenadikeghk

Supported Languages

🇺🇸English

Extension Info & Metadata

Status
Active
Version
2.0.16
Size
24.06 MB
Rating
3.2/5
Reviews
294
Users
100,000
Type
Extension
Updated
Aug 2, 2024
Category
Workflow & planning
Price
Free
Featured
Yes
Visibility
Listed
Mature
No
By Google
No
Trusted
Yes
Download CRX
Chrome Web Store
Report Issue

Publisher Contextual Analysis

Trusted
Author
https://asana.com/View Profile
Privacy
Privacy Policy
Help
Help Center
MX records exist
Yes
Domain exists
Yes
Is disposable
No
Is role-based
No
Mailbox exists
Yes
Website
Visit
Total Extensions
1
Active
1
Obsolete
0
Listed
1
Unlisted
0
Total Users
100,000
Screenshot 1
Screenshot 2
Screenshot 3
Screenshot 4
Screenshot 5

Easily create and search for Asana tasks from anywhere in your browser.

This official Asana Chrome Extension enables you to easily create and search for Asana tasks from anywhere in Chrome. Seamlessly create tasks from anywhere • From any webpage • From email • From selected text or URLs View, edit, and search for tasks alongside your work • Complete tasks • Add collaborators • Edit task details (assignee, due date, project, section, and description) • Search by task name, without switching tools From the small stuff to the big picture, Asana organizes work so teams know what to do, why it matters, and how to get it done. It’s free to get started, simple to use, and powerful enough to run your entire business. Learn more about Asana at www.asana.com.

Item
Type
Severity
Description
cookies
Permission
High
This permission provides full access to read and modify browser cookies. Rated High because it can steal session tokens, modify authentication cookies, and compromise accounts across websites.
activeTab
Permission
Medium
This permission grants temporary access to the current tab. Rated Medium because it can access current page content when invoked, though limited to user-initiated actions.
https://*.asana.com/*
Host
Medium
Host permission — access limited to this URL pattern.
notifications
Permission
Low
This permission displays system notifications. Rated Low because it can only show user-visible notifications without accessing system data.
contextMenus
Permission
Low
This permission adds items to browser context menus. Rated Medium because it only modifies right-click menus without access to page content.

The bundled manifest lists permissions and host_permissions that differ from the published Chrome Web Store listing. The published listing includes additional permissions (scripting, storage, tabs, clipboardWrite) and an extra host (https://mail.google.com/*), while omitting notifications. This mismatch may indicate a version inconsistency or that the extension has been updated without a corresponding version bump, which is suspicious.

manifest.json (Line 15)
{  "permissions": [    "notifications",    "cookies",    "activeTab",    "contextMenus"  ],  "host_permissions": [    "https://*.asana.com/*"  ]}

By severity

Critical0
High1
Medium0
Low0

Versions scanned

None of the 8 scanned versions have more than one unique code-review finding. Counts are unique findings that include each version.

Extension VersionCode Review Findings
No versions with multiple unique findings.

Files with findings

1 distinct path — top paths by unique finding count:

  • manifest.json1
S.No.
Category
Severity
File
Summary
Found in Version
1Other
high
manifest.json (line 15)The bundled manifest lists permissions and host_permissions that differ from the published Chrome Web Store listing. The published listing includes additional permissions (scripting, storage, tabs, clipboardWrite) and…
2.0.16
URLs
140
IPv4
0
IPv6
0

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

Gain full insight into all external connections.

Upgrade for full visibility.

Sign In
d3ki9tyy5l5ruj.cloudfront.net/obj/32c253b5764ccbc1f40249f825340138cffb99ba/emoji_sheet_64_2.pnghttps://d3ki9tyy5l5ruj.cloudfront.net/obj/32c253b5764ccbc1f40249f825340138cffb99ba/emoji_sheet_64_2.png
d3ki9tyy5l5ruj.cloudfront.net/obj/5094bc3dffd6a88173d6fc4dd2d722c2dbb100f4/hovercard-sprite.pnghttps://d3ki9tyy5l5ruj.cloudfront.net/obj/5094bc3dffd6a88173d6fc4dd2d722c2dbb100f4/hovercard-sprite.png
clients2.google.com/service/update2/crxhttps://clients2.google.com/service/update2/crx
*.asana.com/*https://*.asana.com/*
reactjs.org/docs/error-decoder.htmlhttps://reactjs.org/docs/error-decoder.html?invariant=
fb.me/react-polyfillshttps://fb.me/react-polyfills
app.asana.com-https://app.asana.com
app.asana.com/api/1.0https://app.asana.com/api/1.0
asana.com/guide/team/onboard/asana-kickoff/n/n%7BcheckmarkEmoji%7Dhttps://asana.com/guide/team/onboard/asana-kickoff\n\n{checkmarkEmoji}
asana.com-https://asana.com
Showing 1 to 10 of 140 rows
Rows per page:

Gain full insight into all external connections.

Upgrade for full visibility.

Sign In
No IP addresses found
Showing 1 to 8 of 10 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files (scanned top 25 shared text files)

No comparable text files found between these versions.

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.

Sign In