Chrome Web Store
2Versions
0Code reviewed

Not reviewed

No code review on record

We have not reviewed this extension’s code, so we cannot vouch for it either way. Check the permissions below to decide whether it asks for more than it needs.

Want us to read this extension's code? Ask for a review and we'll queue it.

137 indicators in this extension

137 indicators
0 versions analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

What our analysis found

Bnod — Browser Workflow Automation is not yet reviewed by Extension Auditor. Its permissions mean it can read and change data on all websites, can inject scripts into pages and can observe network requests. It was last updated in September 2026.

Bnod — Browser Workflow Automation

Bnod — Browser Workflow Automation Chrome extension security report

ID: dpkhclebgjddmfmfmcofnpncodinonmd

Extension Info & Metadata

Status
Active
Version
1.0.1
Size
3.58 MB
Rating
0.0/5
Reviews
0
Users
28
Type
Extension
Updated
Sep 9, 2026
Category
Workflow & planning
Price
Free
Featured
No
Visibility
Listed
Mature
No
By Google
No
Trusted
No
This publisherTrack record
1extension
All still listed

Publisher Contextual Analysis

Author
bnod
MX records exist
No
Domain exists
No
Is disposable
No
Is role-based
No
Mailbox exists
No
Website
Visit
Extensions
1
Active
1
Obsolete
0
Listed
1
Unlisted
0
Users
28

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Screenshots & videos

Screenshot 1
Screenshot 2
Screenshot 3
Screenshot 4
Screenshot 5

Install growth

Item
Type
Severity
Description
debugger
Permission
Critical
This permission grants the extension ability to debug and control other extensions and browser tabs. Rated Critical because it can access and modify other extensions' internal state, inject code, and access sensitive data from any tab.
scripting
Permission
Critical
This permission allows injection and execution of JavaScript on any webpage. Rated Critical because it can modify page content, steal sensitive data, and inject malicious code into any site the extension has access to.
proxy
Permission
Critical
This permission allows the extension to control the browser's proxy settings. Rated Critical because it can route all traffic through potentially malicious proxies, enabling man-in-the-middle attacks and traffic monitoring.
webRequest
Permission
Critical
This permission enables the extension to monitor and analyze all web requests made by the browser. Rated Critical because it can observe all network traffic including sensitive data, track browsing behavior, and gather authentication tokens.
webRequestAuthProvider
Permission
Critical
This permission allows the extension to handle authentication requests and modify authentication headers. Rated Critical because it can intercept login credentials, session tokens, and modify authentication flows to compromise accounts.
declarativeNetRequest
Permission
Critical
This permission allows the extension to define rules to block, redirect, or modify network requests. Rated Critical because it can control all network traffic, potentially blocking security updates or redirecting to malicious sites.
<all_urls>
Host
Critical
Broad host access — the extension can read/modify content on every website.
Dangerous Permission Combination: scripting,<all_urls>,webRequest
Risk Factor
Critical
Enables sophisticated data theft through script injection and traffic monitoring
Dangerous Permission Combination: scripting,<all_urls>,cookies
Risk Factor
Critical
Enables sophisticated data theft through script injection and traffic monitoring
webNavigation
Permission
High
This permission enables monitoring of all browser navigation events and transitions. Rated High because it can track every page visit, navigation method, and browsing pattern, potentially exposing sensitive browsing behavior and user activities.
downloads
Permission
High
This permission controls file downloads and accesses download history. Rated High because it can download malicious files, access sensitive downloaded documents, and track user download patterns.
cookies
Permission
High
This permission provides full access to read and modify browser cookies. Rated High because it can steal session tokens, modify authentication cookies, and compromise accounts across websites.
offscreen
Permission
High
This permission creates hidden browser documents with full DOM access. Rated High because it can run background operations invisibly, potentially executing malicious code without user awareness.
Dangerous Permission Combination: scripting,cookies,webRequest
Risk Factor
High
Enables extensions to interact with scripts, modify files and downloads, and alter browsing history and bookmarks, potentially affecting data integrity and user control.
Broad Host Permissions
Risk Factor
High
This extension has broad host permissions allowing it to access many or all websites.
Broad Content Script Access
Risk Factor
High
This extension can inject scripts into any website.
storage
Permission
Medium
This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
unlimitedStorage
Permission
Medium
This permission removes storage quota restrictions. Rated Medium because it can store large amounts of user data without limits, potentially impacting browser performance and storing extensive tracking data.
tabs
Permission
Medium
This permission enables tab management and monitoring. Rated Medium because it can track open tabs, access tab metadata, and monitor user browsing patterns.
https://auth.openai.com/*
Host
Medium
Host permission — access limited to this URL pattern.
https://chatgpt.com/*
Host
Medium
Host permission — access limited to this URL pattern.
https://*.convex.site/*
Host
Medium
Host permission — access limited to this URL pattern.
https://*.convex.cloud/*
Host
Medium
Host permission — access limited to this URL pattern.
https://us.i.posthog.com/*
Host
Medium
Host permission — access limited to this URL pattern.
sidePanel
Permission
Low
This permission adds custom panels to the browser interface. Rated Low because it only affects browser UI elements and cannot access page content.
alarms
Permission
Low
This permission schedules periodic tasks. Rated Low because it can only trigger events at specified times without access to sensitive data.
notifications
Permission
Low
This permission displays system notifications. Rated Low because it can only show user-visible notifications without accessing system data.
contextMenus
Permission
Low
This permission adds items to browser context menus. Rated Medium because it only modifies right-click menus without access to page content.

137 indicators in this extension

137 indicators
0 versions analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

About this extension

Record, build, schedule, and run browser automations with a visual editor and optional AI.

Read the publisher’s full description

AI agent + recorder + scheduler for your browser, all in one Chrome extension. Record what you do once. Let your browser run it forever — on schedule, on demand, or as a tool an AI agent calls when you ask. Bnod turns repetitive browser work into reusable workflows, all without leaving Chrome. 🎬 Record any task in one click Click "Record this tab" and Bnod captures every click, keystroke, and dropdown — even inside iframes — as a clean editable workflow. Stop recording — the steps are already in the editor, ready to replay. 🤖 Build with AI — just describe what you want Type "every morning at 9, check prices on my saved products and notify me of any drops" and Bnod drafts the workflow. The AI proposes a plan, asks clarifying questions, and assembles the steps. You approve the plan before tokens get spent. ⏰ Run on schedule, on demand, or as an AI tool Cron schedules, manual triggers, or expose any workflow as a tool an AI agent calls mid-conversation. Logs and per-step output are stored locally so you can see what ran. 🌐 Works on any website The recorder produces stable selectors that survive minor page changes. The replay engine handles forms, multi-step flows, and login-protected sites using your existing browser session. 📊 Web scraping and data extraction Pull data from any page: scrape repeating lists into structured arrays, extract HTML tables into CSV, capture screenshots, fire HTTP requests with auth/cookies/proxy. Export to CSV, JSON, or push to any endpoint via webhook. 🧠 Bring your own AI key (BYOK) Anthropic Claude, OpenAI GPT, Google Gemini, OpenRouter (one key, 300+ models), or sign in with your existing ChatGPT Plus subscription via OpenAI's official OAuth — no extra billing. AI calls go directly from your browser to the provider; we never see your prompts. 🛠️ 14 ready-to-use templates Hacker News headlines export, Google search results to CSV, hourly RSS check with notifications, daily HTTP uptime ping, "summarize this page with AI", multi-tab link snapshots, screenshot every URL in a list, and more. Install with one click, customize in the editor. 🔄 Sub-workflows and AI tools Call one workflow from another with typed inputs and a return value. Expose any sub-workflow with an AI description — the AI agent decides when to call it. 📦 Export and import Workflows export as portable JSON files. Tools and required environment keys travel with the workflow — the import flow prompts for missing values. 🔐 Privacy by design Your workflows, recordings, environment variables, uploaded files, and AI prompts stay in your browser. They never leave your computer unless you explicitly export them. Optional Google Sign-In and anonymous product analytics (no PII, no workflow content) are the only data the server sees. 🚀 How to start 1️⃣ Click "Add to Chrome" and pin the Bnod icon to your toolbar. 2️⃣ Open the side panel. Try a template, click "Record this tab" on any page, or hit "Build with AI" and describe what you want. 3️⃣ Run on demand, set a schedule, or expose your workflow as an AI agent tool. ⭐ Use cases - Web scraper for daily data extraction with CSV export and change notifications - No-code form filler that auto-completes across many similar pages - Take a screenshot of every item on a list - Trigger a webhook on a schedule with data scraped from a page - AI agents that read pages and call your custom HTTP tools - Login-required scraping with cookies and session handling - Reproduce a manual test across browser sessions 🆚 How Bnod is different - Unlike chat-only extensions — Bnod has a real visual editor. Build multi-step workflows with branching, loops, schedules, not just chat with a page. - Unlike scheduled scrapers — Bnod can do anything when a change is detected: POST to Slack, screenshot, AI-summarize, chain into another workflow. - Unlike server workflow tools — Bnod runs in your browser. No server to set up. No monthly subscription. Browser sessions and logins just work because it's your real Chrome. ❓ FAQ Does Bnod send my data anywhere? Workflow contents, recorded selectors, page data, uploaded files, and AI prompts stay in your browser. Account email (if you sign in with Google) and anonymous product events are the only data the server sees. Do I need an AI provider to use it? No. The recorder, editor, scheduler, and runner all work without an AI key. The AI Builder and AI Agent features require a configured provider. Can I bring my own ChatGPT Plus subscription? Yes. Settings → AI Providers → Add provider → "ChatGPT Plus". Sign in via OpenAI's official OAuth. Uses the Codex Responses API — no extra billing. How does the schedule keep working when Chrome is closed? It doesn't. Chrome must be running. The minimum interval is one minute. Will recorded selectors break when the site changes? Sometimes. Bnod caches several selectors per element and replays the most stable one. When a page redesigns, edit the selector in the step inspector. Can workflows interact with sites that require login? Yes — uses your regular browser session. Cookies and authentication work because it's the same Chrome you already use. Does it work in incognito? Yes, after you allow the extension in incognito at chrome://extensions. What languages are supported? English 9 more at launch. Settings → Workspace → Language lets you override the browser locale per install. Privacy Policy: https://bnod.app/privacy Terms of Use: https://bnod.app/terms Support: bnodapp@gmail.com

User reviews

Extension files

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs
115
IPv4
22

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

No URLs found
No IP addresses found

137 indicators in this extension

137 indicators
0 versions analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe
Version
Size
Verdict
Findings
Permhash
1.0.1
Latest
3.58 MBNot scanned—
93daa546d2ff6645c5deebaf708683f8d0e929ae58318f56c5b04dd7481b27e3
1.0.0
3.58 MBNot scanned—
93daa546d2ff6645c5deebaf708683f8d0e929ae58318f56c5b04dd7481b27e3
Showing 1 to 2 of 10 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.