Chrome Web Store

18Versions

1Code reviewed

No malware found

In code review (v2.9)

Our reviewer read version 2.9 — the most recent version we have reviewed — and found no malicious behaviour. The version shown here has not been individually reviewed yet.

What our analysis found

Capsule Hub by Tilantra, used by 100,000 people, showed no malicious code in Extension Auditor's review. It was last updated in October 2026.

Analyst notes

All core operations (capturing AI chat messages, injecting context, uploading attachments) match the extension's published description and privacy policy. Data is sent exclusively to [domain withheld] — a first‑party domain whose privacy policy lists the exact categories being collected (PII, auth info, personal communications, website content). The bundled manifest omits host_permissions that are present in the published CWS summary; this is a compliance shortfall, but the missing hosts are all legitimately used across the supported platforms. The ML model likely flagged the extension due to high network request counts, broad host permissions, and `unsafe-wasm-eval` — all explained by normal functionality: many API calls to a first‑party backend, content‑script injection into many AI services, and a local ML pipeline.

Capsule Hub by Tilantra Chrome extension security report

ID: ngeoeefidomejcdhiecidpaalfoekjbh

Supported Languages

🇺🇸English

Extension Info & Metadata

Status

Active

Version

2.17

Size

1.38 MB

Rating

3.0/5

Reviews

Users

100,000

Type

Extension

Updated

Oct 10, 2026

Publisher Contextual Analysis

Author: https://capsulehub.ai
Privacy: Privacy Policy
Help: Help Center
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes
Website: Visit

Extensions

Active

Obsolete

Listed

Unlisted

Users

100,000

Screenshots & videos

Install growth

User Growth

Showing data from Jan 07, 2026 to Oct 10, 2026

Versions

+25%(+20,000 users)

Compared to 3 months ago

17 versions released in this period

Rating Count

Total: 60 ratings+4 (7%)

Average Rating

Current: 3.72 / 5.0+3.72

See plans

React Flow

Internal permhash`a111bdc9d6…`
No malicious matches

1 other extension carries this fingerprint, none of them known malicious.

Withheldnot flagged

Permhash (Mandiant)`ebe7d34b01…`
1 malicious

12 other extensions carry this fingerprint; 1 of the cluster are known malicious.

Withheldmalicious
Withheldnot flagged
Withheldnot flagged
Withheldnot flagged
Withheldnot flagged
Withheldnot flagged
Withheldnot flagged
+5 more

Item	Type	Severity	Description
identity	Permission	High	This permission accesses Chrome identity service and user information. Rated High because it can obtain OAuth tokens, access connected accounts, and impersonate the user in authenticated service.
downloads	Permission	High	This permission controls file downloads and accesses download history. Rated High because it can download malicious files, access sensitive downloaded documents, and track user download patterns.
Contextual Risk Factors	Risk Factor	High	The following context increases the overall risk: • 19% increase: Access to sensitive domains increases potential impact • 10% increase: Early script execution enables pre-emptive content manipulation • 25% increase: Unsafe code evaluation capabilities increase attack surface
Unsafe WebAssembly Execution	Risk Factor	High	This extension's CSP allows "wasm-unsafe-eval".
activeTab	Permission	Medium	This permission grants temporary access to the current tab. Rated Medium because it can access current page content when invoked, though limited to user-initiated actions.
storage	Permission	Medium	This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
https://notebooklm.google.com/*	Host	Medium	Host permission — access limited to this URL pattern.
https://backend.tilantra.com/*	Host	Medium	Host permission — access limited to this URL pattern.
https://chat.openai.com/*	Host	Medium	Host permission — access limited to this URL pattern.
https://chatgpt.com/*	Host	Medium	Host permission — access limited to this URL pattern.
https://gemini.google.com/*	Host	Medium	Host permission — access limited to this URL pattern.
https://aistudio.google.com/*	Host	Medium	Host permission — access limited to this URL pattern.
https://claude.ai/*	Host	Medium	Host permission — access limited to this URL pattern.
https://chat.deepseek.com/*	Host	Medium	Host permission — access limited to this URL pattern.
https://mail.google.com/*	Host	Medium	Host permission — access limited to this URL pattern.
https://www.perplexity.ai/*	Host	Medium	Host permission — access limited to this URL pattern.
https://lovable.dev/*	Host	Medium	Host permission — access limited to this URL pattern.
https://.google.com/	Host	Medium	Host permission — access limited to this URL pattern.
https://.googleusercontent.com/	Host	Medium	Host permission — access limited to this URL pattern.
https://.usercontent.goog/	Host	Medium	Host permission — access limited to this URL pattern.
https://.myhuaweicloud.com/	Host	Medium	Host permission — access limited to this URL pattern.
https://.s3.amazonaws.com/	Host	Medium	Host permission — access limited to this URL pattern.
https://ppl-ai-file-upload.s3.amazonaws.com/*	Host	Medium	Host permission — access limited to this URL pattern.
https://copilot.microsoft.com/*	Host	Medium	Host permission — access limited to this URL pattern.
https://.copilot.microsoft.com/	Host	Medium	Host permission — access limited to this URL pattern.
https://outlook.live.com/*	Host	Medium	Host permission — access limited to this URL pattern.
https://outlook.office.com/*	Host	Medium	Host permission — access limited to this URL pattern.
https://outlook.office365.com/*	Host	Medium	Host permission — access limited to this URL pattern.
https://replit.com/*	Host	Medium	Host permission — access limited to this URL pattern.
https://app.emergent.sh/*	Host	Medium	Host permission — access limited to this URL pattern.
https://grok.com/*	Host	Medium	Host permission — access limited to this URL pattern.
https://assets.grok.com/*	Host	Medium	Host permission — access limited to this URL pattern.
Access to Sensitive Domains	Risk Factor	Medium	This extension requests access to sensitive domains: https://notebooklm.google.com/, https://gemini.google.com/, https://aistudio.google.com/, https://mail.google.com/, https://.google.com/, https://.googleusercontent.com/, https://.s3.amazonaws.com/, https://ppl-ai-file-upload.s3.amazonaws.com/, https://outlook.live.com/, https://outlook.office.com/, https://outlook.office365.com/
Early Content Script Execution	Risk Factor	Medium	This extension runs content scripts at document_start.

Sensitive Domain Access

This extension has access to the following sensitive domains:

https://notebooklm.google.com/*
https://gemini.google.com/*
https://aistudio.google.com/*
https://mail.google.com/*
https://*.google.com/*
https://*.googleusercontent.com/*
https://*.s3.amazonaws.com/*
https://ppl-ai-file-upload.s3.amazonaws.com/*
https://outlook.live.com/*
https://outlook.office.com/*
https://outlook.office365.com/*

About this extension

Capture AI conversations as capsules and reuse context instantly across ChatGPT, Claude, Gemini and other Tools.

Read the publisher’s full description

Capsule Hub: Bridge Your AI Conversations Capsule Hub is a context-transfer tool for AI workflows (a feature offering by Tilantra). Whether you are brainstorming on ChatGPT, coding on Claude, or researching on Gemini, it lets you capture the essence of any conversation into a “Capsule” and instantly reuse it in another AI chat.   Why Capsule Hub? Most users lose significant time switching between AI tools and rebuilding context. Capsule Hub turns scattered conversations into a unified, portable knowledge base. Key Features 1. Context Capsule Generation: Instantly capture the core context of a conversation into a Capsule. This removes the need to copy-paste long chat histories or repeatedly explain the same background. 2. Drag and Drop Injection: Use the Drop feature to inject a saved capsule into a new chat. The AI immediately understands the background, goals, and constraints of your work. 3. Team and Collaboration Management: You can organize capsules by teams such as Engineering, Marketing, or Product. See who created each capsule to maintain transparency and smooth collaboration. 4. Multi-Model Support: Works seamlessly with ChatGPT (Official and Plus), Claude.ai, and Google Gemini and AI Studio. 5. Smart Library: Search your capsule library by content, tags, or team for fast and easy retrieval. Tiers 1. Basic: Create and use capsules privately. Does not include collaboration or versioning. 2. Pro: All basic features along with team collaboration. Ability to merge, split capsules and rollback to versions. Includes premium support and early access to marketplace and other features. Coming Soon: Versioning (Beta) In the next major update, Capsule Hub will introduce versioning features, including the ability to track changes to capsules over time, roll back to previous versions if mistakes are made, and tag stable versions while maintaining team collaboration.  Download Capsule Hub and never start a chat from zero again!

User reviews

3.4 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

"Feature Request: Multimodal/Image Mapping support. It would be highly beneficial if Capsule Hub could capture images from a chat session, host them temporarily with assigned index names/numbers (e.g., Image_01), and automatically reference those markers in the injected markdown context. This would allow multi-model tools to correctly map and understand visual results when switching platforms."

Sai Teja·7 Oct 2026

Not able to generate capsule at all ! i tried so many times it's not generating capsule with any AI

Teja vardhan Pilla·6 Oct 2026

Good

Extension files

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.

No network indicators were extracted from this version.

Version	Size	Verdict	Findings	Permhash
2.17 Latest	1.38 MB	Not scanned	—	ebe7d34b01a28e1ba7b30e3d6bca517c58532adc2bf38e3a4ab874a96a700d68
2.16	1.38 MB	Not scanned	—	ebe7d34b01a28e1ba7b30e3d6bca517c58532adc2bf38e3a4ab874a96a700d68
2.15	1.38 MB	Not scanned	—	ebe7d34b01a28e1ba7b30e3d6bca517c58532adc2bf38e3a4ab874a96a700d68
2.13	1.37 MB	Not scanned	—	ebe7d34b01a28e1ba7b30e3d6bca517c58532adc2bf38e3a4ab874a96a700d68
2.12	1.33 MB	Not scanned	—	ebe7d34b01a28e1ba7b30e3d6bca517c58532adc2bf38e3a4ab874a96a700d68
2.11	1.30 MB	Not scanned	—	ebe7d34b01a28e1ba7b30e3d6bca517c58532adc2bf38e3a4ab874a96a700d68
2.10	1.29 MB	Not scanned	—	ebe7d34b01a28e1ba7b30e3d6bca517c58532adc2bf38e3a4ab874a96a700d68
2.9	1.29 MB	No malware found	0	ebe7d34b01a28e1ba7b30e3d6bca517c58532adc2bf38e3a4ab874a96a700d68
2.8	1.21 MB	Not scanned	—	ebe7d34b01a28e1ba7b30e3d6bca517c58532adc2bf38e3a4ab874a96a700d68
2.7	1.15 MB	Not scanned	—	ebe7d34b01a28e1ba7b30e3d6bca517c58532adc2bf38e3a4ab874a96a700d68

Showing 1 to 10 of 20 rows

Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

Gain full insight into all external connections.

Upgrade for full visibility.

Popular in productivity/tools

Torrent Scanner8,000,000 users
Nimble capture1,000,000 users
PrintFriendly: Print, PDF Editor & Full Page Screenshot1,000,000 users
AI Translator for Chrome900,000 users
SkipAds - no more video ads!800,000 users

No malware found

What our analysis found