Chrome Web Store
43Versions
1Code reviewed

No malware found

In code review (v2.19.0)

Our reviewer read version 2.19.0 — the most recent version we have reviewed — and found no malicious behaviour. The version shown here has not been individually reviewed yet.

What our analysis found

Beyond 20, used by 500,000 people, showed no malicious code in Extension Auditor's review. Its permissions mean it can inject scripts into pages. It comes from a trusted publisher and was last updated in September 2026.

The extension is a well-known open-source tool for integrating D&D Beyond with VTTs. The codebase shows no data exfiltration, tracking, or malicious patterns. All network activity (e.g., sending rolls to the Discord bot at) is disclosed in the extension’s options and matches its purpose. The permissions (activeTab, scripting, storage, specific host permissions) are necessary for injecting roll buttons and relaying game data. The only discrepancy is an undeclared optional_host_permissions entry in the CWS listing, but this is likely an oversight and does not indicate malicious behavior.

Beyond 20

Beyond 20 Chrome extension security report

ID: gnblbpbepfbfmoobegdogkglpbhcjofh

Supported Languages

🇺🇸English

Extension Info & Metadata

Status
Active
Version
2.21.0
Size
1.41 MB
Rating
4.8/5
Reviews
252
Users
500,000
Type
Extension
Updated
Sep 17, 2026
Category
Games
Price
Free
Featured
Yes
Visibility
Listed
Mature
No
By Google
No
Trusted
Yes
This publisherTrack record
1extension
All still listed
Scanned by Extension Auditor — Low RiskDevelopers: embed this badge to link to this report.

Publisher Contextual Analysis

Trusted
Author
https://beyond20.here-for-more.info/
MX records exist
Yes
Domain exists
Yes
Is disposable
No
Is role-based
No
Mailbox exists
Yes
Website
Visit
Extensions
1
Active
1
Obsolete
0
Listed
1
Unlisted
0
Users
500,000

Screenshots & videos

Screenshot 2
Screenshot 3
Screenshot 4
Screenshot 5

Install growth

Item
Type
Severity
Description
scripting
Permission
Critical
This permission allows injection and execution of JavaScript on any webpage. Rated Critical because it can modify page content, steal sensitive data, and inject malicious code into any site the extension has access to.
activeTab
Permission
Medium
This permission grants temporary access to the current tab. Rated Medium because it can access current page content when invoked, though limited to user-initiated actions.
tabs
Permission
Medium
This permission enables tab management and monitoring. Rated Medium because it can track open tabs, access tab metadata, and monitor user browsing patterns.
storage
Permission
Medium
This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
*://beyond20.kicks-ass.org/roll
Host
Medium
Host permission — access limited to this URL pattern.
*://app.roll20.net/editor/
Host
Medium
Host permission — access limited to this URL pattern.
*://*.dndbeyond.com/*
Host
Medium
Host permission — access limited to this URL pattern.
*://*.forge-vtt.com/game
Host
Medium
Host permission — access limited to this URL pattern.

Gain full insight into all external connections.

Upgrade for full visibility.

About this extension

Integrates the D&D Beyond Character Sheets with Roll20 and Foundry VTT.

Read the publisher’s full description

Beyond20 integrates the D&D Beyond Character Sheet seamlessly into Roll20, Foundry VTT, and Discord. It can also provide a dice roller for rolling all your skills and attacks directly from the D&D Beyond character sheets or monster stat blocks. A roll button will be automatically added to D&D Beyond’s character sheet sidebars (abilities, skill checks, saving throws, weapon attacks, spells, class features, and more) that lets you either roll the dice directly into the Virtual TableTop chat, or display the spell card, feature or equipment item for others to see. Check out the website https://beyond20.here-for-more.info for more information about this extensions. Watch the video tour and check out the screenshots or check the full list of features. This extension is open source and released under a GPL v3 License with some parts under MIT license.

User reviews

Extension files

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.

No network indicators were extracted from this version.

Version
Size
Verdict
Findings
Permhash
2.21.0
Latest
1.41 MBNot scanned—
70943f0965b28be20bce29b19646d297e5424908bbc1ab41bfae9aef42a651c8
2.20.1
1.41 MBNot scanned—
70943f0965b28be20bce29b19646d297e5424908bbc1ab41bfae9aef42a651c8
2.20.0
1.41 MBNot scanned—
70943f0965b28be20bce29b19646d297e5424908bbc1ab41bfae9aef42a651c8
2.19.0
1.40 MBNo malware found0
70943f0965b28be20bce29b19646d297e5424908bbc1ab41bfae9aef42a651c8
2.18.0
1.39 MBNot scanned—
70943f0965b28be20bce29b19646d297e5424908bbc1ab41bfae9aef42a651c8
2.17.1
1.37 MBNot scanned—
70943f0965b28be20bce29b19646d297e5424908bbc1ab41bfae9aef42a651c8
2.17.0
1.36 MBNot scanned—
70943f0965b28be20bce29b19646d297e5424908bbc1ab41bfae9aef42a651c8
2.16.2
1.36 MBNot scanned—
70943f0965b28be20bce29b19646d297e5424908bbc1ab41bfae9aef42a651c8
2.16.1
1.36 MBNot scanned—
70943f0965b28be20bce29b19646d297e5424908bbc1ab41bfae9aef42a651c8
2.16.0
1.36 MBNot scanned—
70943f0965b28be20bce29b19646d297e5424908bbc1ab41bfae9aef42a651c8
Showing 1 to 10 of 50 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

Gain full insight into all external connections.

Upgrade for full visibility.

Popular in Games