Chrome Web StoreNo malware found
In code review
Our reviewer read this extension’s code and found no malicious behaviour. An automated risk flag was reviewed and overturned.
446 indicators in this extension
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
What our analysis found
CanvasCape, used by 1,000 people, showed no malicious code in Extension Auditor's review. Its permissions mean it can inject scripts into pages. It comes from a trusted publisher and was last updated in August 2026.
Analyst notes
CanvasCape is a legitimate Canvas LMS enhancement tool whose 'High' risk score is driven entirely by permission-scoring heuristics (scripting=Critical, activeTab=Medium) and the presence of bundled open-source libraries (, jQuery, React, Bootstrap, PapaParse), not by actual malicious behavior. All network calls observed are either to internal extension resources via chrome-extension:// URLs (the fetch() in:292 loads the extension's own React components) or to the Canvas LMS API via the caccl library — the extension's declared purpose. No external data exfiltration, no credential harvesting, no cookie access, no suspicious encoded payloads, and no actual WebAssembly code exists despite the wasm-unsafe-eval CSP entry. The third-party risk score (Impact) and Google trusted publisher badge both corroborate the benign verdict.
CanvasCape Chrome extension security report
ID: mlahdfgjbidfdlhmpmfnikheobfeibeg
Supported Languages
Extension Info & Metadata
Publisher Contextual Analysis
- Author
- Gabe Abrams
- Privacy
- Privacy Policy
- MX records exist
- Yes
- Domain exists
- Yes
- Is disposable
- No
- Is role-based
- No
- Mailbox exists
- Yes
Screenshots & videos
Install growth
Each row lists a threat category the scanner evaluates. A checkmark means the review ran and found no matching issues in that category for this version.
Data Exfiltration
Code review completed; no malicious patterns detected for this category.
Unauthorized Data Collection
Code review completed; no malicious patterns detected for this category.
Network Interception
Code review completed; no malicious patterns detected for this category.
Code Injection
Code review completed; no malicious patterns detected for this category.
Credential Theft
Code review completed; no malicious patterns detected for this category.
Obfuscation
Code review completed; no malicious patterns detected for this category.
Tracking
Code review completed; no malicious patterns detected for this category.
Privilege Escalation
Code review completed; no malicious patterns detected for this category.
Phishing
Code review completed; no malicious patterns detected for this category.
Remote Code Loading
Code review completed; no malicious patterns detected for this category.
Other
Code review completed; no malicious patterns detected for this category.
446 indicators in this extension
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
About this extension
A suite of tools that enhance the Canvas LMS. Each tool is simple and designed with students and teaching teams in mind.
Read the publisher’s full description
This extension adds a suite of useful tools to the Canvas LMS. After you *install* and *pin* this extension in Chrome, all you have to do is visit a Canvas course or account and click the red cape icon in your browser (see the screenshots). Found a bug? Have ideas? Email canvascape@gabeabrams.com. We'd love to get your feedback! Your security and privacy are paramount and that's why CanvasCape operates entirely in your browser: all processing and visualization, happens on your machine. We don't host any databases. This tool doesn't even have servers. CanvasCape is not endorsed by or associated with Canvas, Instructure, Harvard University. Copyright 2024, Gabriel Abrams, All rights reserved. ––– ––– ––– By using this add-on, you agree to our terms & conditions: • Use CanvasCape at your own risk. • The software is provided 'as is', without warranty of any kind, express or implied, including but not limited to the warranties of merchantability, fitness for a particular purpose, title and non-infringement. In no event shall the copyright holders or anyone distributing the software be liable for any damages or other liability, whether in contract, tort, or otherwise, arising from, out of or in connection with the software or the use of other dealings in the software. • In no event shall the copyright holders or anyone distributing the software be liable for users' violation of any law, policy, or regulation, including but not limited to FERPA and GDPR.
User reviews
Extension files
Browse and explore files within this extension package
Gain full insight into all external connections.
Upgrade for full visibility.
URLs
View the external URLs this extension communicates with to understand its network activity and data interactions.
446 indicators in this extension
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
Code Diff
Compare extension code between any two versions.
0 changed files detected
No comparable text files found between these versions.
Gain full insight into all external connections.
Upgrade for full visibility.
Related extensions
More from Gabe Abrams
- D&D Soundboard Launcher39 users
Popular in Workflow & Planning
- Adobe Acrobat: PDF edit, convert, sign tools350,000,000 users
- Application Launcher For Drive (by Google)103,000,000 users
- AdBlock — block ads across the web65,000,000 users
- Chrome Remote Desktop41,000,000 users
- Microsoft Single Sign On37,000,000 users
Store rankings
Where this extension appears in store category, collection and keyword rankings.