Chrome Web Store
26Versions
1Code reviewed

No malware found

In code review (v8.5.0)

Our reviewer read version 8.5.0 — the most recent version we have reviewed — and found no malicious behaviour. The version shown here has not been individually reviewed yet.

What our analysis found

ChatGPT Image Auto, used by 100,000 people, showed no malicious code in Extension Auditor's review. Its permissions mean it can inject scripts into pages. It comes from a trusted publisher and was last updated in July 2026.

Analyst notes

The extension performs its stated purpose of automating ChatGPT image generation: it injects prompts, attaches reference images, collects generated images, and offers batch processing. All network requests are restricted to [domain withheld] and [domain withheld], the declared host permissions. No data exfiltration to third parties was found; event logs remain local. The only significant concern is a mismatch between the published manifest (host_permissions: labs.google) and the bundled manifest (host_permissions: [domain withheld] and [domain withheld]) – this appears to be a listing administrative issue rather than malicious intent. Minor hex-encoding of CSS selectors exists but does not hide malicious logic. The ML risk score is low, the publisher is trusted, and no other extensions by this publisher are flagged.

ChatGPT Image Auto

ChatGPT Image Auto Chrome extension security report

ID: gedfnhdibkfgacmkbjgpfjihacalnlpn

Supported Languages

🇺🇸English
🇻🇳Vietnamese

Extension Info & Metadata

Status
Active
Version
8.6.0
Size
0.13 MB
Rating
4.0/5
Reviews
149
Users
100,000
Type
Extension
Updated
Jul 30, 2026
Category
Tools
Price
Free
Featured
No
Visibility
Listed
Mature
No
By Google
No
Trusted
Yes
This publisherTrack record
6extensions
All still listed
Scanned by Extension Auditor — Low RiskDevelopers: embed this badge to link to this report.

Publisher Contextual Analysis

Trusted
Author
duckmartians.info
MX records exist
Yes
Domain exists
Yes
Is disposable
No
Is role-based
No
Mailbox exists
Yes
Website
Visit
Extensions
6
Active
6
Obsolete
0
Listed
3
Unlisted
3
Users
165,344

Screenshots & videos

Screenshot 2
Screenshot 3
Screenshot 4

Install growth

Item
Type
Severity
Description
scripting
Permission
Critical
This permission allows injection and execution of JavaScript on any webpage. Rated Critical because it can modify page content, steal sensitive data, and inject malicious code into any site the extension has access to.
downloads
Permission
High
This permission controls file downloads and accesses download history. Rated High because it can download malicious files, access sensitive downloaded documents, and track user download patterns.
activeTab
Permission
Medium
This permission grants temporary access to the current tab. Rated Medium because it can access current page content when invoked, though limited to user-initiated actions.
storage
Permission
Medium
This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
tabs
Permission
Medium
This permission enables tab management and monitoring. Rated Medium because it can track open tabs, access tab metadata, and monitor user browsing patterns.
https://chatgpt.com/*
Host
Medium
Host permission — access limited to this URL pattern.
https://chat.openai.com/*
Host
Medium
Host permission — access limited to this URL pattern.
sidePanel
Permission
Low
This permission adds custom panels to the browser interface. Rated Low because it only affects browser UI elements and cannot access page content.
alarms
Permission
Low
This permission schedules periodic tasks. Rated Low because it can only trigger events at specified times without access to sensitive data.

About this extension

Automate your entire Whisk AI workflow. Batch-send prompts, save time, accelerate creativity, and take full control of your process!

Read the publisher’s full description

Stop clicking, start creating! Auto Whisk is your personal assistant for Google's Whisk, designed to automate your entire tedious workflow, saving you hours of manual labor. Tired of manually copying and pasting hundreds of prompts? Frustrated with right-clicking to save every single generated image? Auto Whisk takes over this boring work for you. Core Functionality (Why You Should Install It): 1. Powerful Batch Prompt Automation: This is the number one reason you need Auto Whisk. Instead of doing it manually, you can now: - Paste your entire list of prompts (one per line). - Or import your list directly from a .txt file. Click "Start," and the extension will automatically feed each prompt to Whisk, one by one, until the entire list is complete. 2. Automatic Image Downloader: No more manual saving! Auto Whisk features a robust built-in downloader: - It automatically detects newly generated images on the Whisk page. - It automatically downloads them to your computer. You can specify a subfolder (e.g., "Whisk Downloads") to keep all your generated images perfectly organized. 3. Full Control Over Your Workflow: You are in command. Auto Whisk gives you all the tools you need to manage the process: - Flexible Timing: Choose between a "Random" delay (e.g., 8-15 seconds) to mimic human behavior or a "Fixed" wait time (e.g., 10 seconds) between prompts. - Repeat Prompts: Want to run each prompt 3 times to explore variations? Simply set the number of repetitions. - Job Management: Easily "Pause" the job at any time and "Resume" exactly where you left off. You can also "Stop" the process entirely. - Start From Anywhere: Need to restart from prompt #50? No problem, just set the "Start from prompt" number. 4. Smart & Safe: - Error Handling: The extension intelligently detects prompts that fail (e.g., due to policy violations). It automatically logs the failed prompt for you and moves to the next one, ensuring your workflow is never interrupted. - Project Management: Auto Whisk is aware of which Whisk project you're on. You can choose to "Create New Project" or "Run on This Project." When running on an existing project, it remembers what's already been downloaded to prevent duplicates. Who is this for? - Content Creators: Rapidly generate hundreds of image variations for your projects. - Developers & Researchers: Automatically build large datasets from Whisk. - Curious Explorers: Experiment with Whisk's capabilities without the time-consuming manual effort. Install Auto Whisk today to reclaim your time and focus on what truly matters: Creativity.

User reviews

Extension files

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.

No network indicators were extracted from this version.

Version
Size
Verdict
Findings
Permhash
8.6.0
Latest
0.13 MBNot scanned—
f9355411dd8f56ca3a54397e6386514d51e73f0b7ac9e61f9a597d8f24805fc3
8.5.0
0.13 MBNo malware found0
f9355411dd8f56ca3a54397e6386514d51e73f0b7ac9e61f9a597d8f24805fc3
8.4.7
0.83 MBNot scanned—
5e0b080294b8c174ae1ae4e3d6f48e1e6412539ae957c1ac16fc0c73de561cc0
8.4.5
0.84 MBNot scanned—
5e0b080294b8c174ae1ae4e3d6f48e1e6412539ae957c1ac16fc0c73de561cc0
8.4.4
0.83 MBNot scanned—
5e0b080294b8c174ae1ae4e3d6f48e1e6412539ae957c1ac16fc0c73de561cc0
8.4.3
0.84 MBNot scanned—
5e0b080294b8c174ae1ae4e3d6f48e1e6412539ae957c1ac16fc0c73de561cc0
8.4.2
0.84 MBNot scanned—
5e0b080294b8c174ae1ae4e3d6f48e1e6412539ae957c1ac16fc0c73de561cc0
8.4.1
0.83 MBNot scanned—
5e0b080294b8c174ae1ae4e3d6f48e1e6412539ae957c1ac16fc0c73de561cc0
8.3.1
0.84 MBNot scanned—
5e0b080294b8c174ae1ae4e3d6f48e1e6412539ae957c1ac16fc0c73de561cc0
8.2.4
0.84 MBNot scanned—
5e0b080294b8c174ae1ae4e3d6f48e1e6412539ae957c1ac16fc0c73de561cc0
Showing 1 to 10 of 30 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

Gain full insight into all external connections.

Upgrade for full visibility.