Chrome Web Store
13Versions
1Code reviewed

No malware found

In code review (v0.0.3)

Our reviewer read version 0.0.3 — the most recent version we have reviewed — and found no malicious behaviour. The version shown here has not been individually reviewed yet.

1521 indicators in this extension

1521 indicators
1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

What our analysis found

Chippy: AI Writer with GPT showed no malicious code in Extension Auditor's review. It comes from a trusted publisher and was last updated in October 2023.

Analyst notes

The extension's code is consistent with its stated purpose as a ChatGPT-powered AI writing assistant. All substantive API calls route to the publisher's own `[domain withheld] backend; Gmail email reading (` `) stores thread data in sessionStorage only for in-context AI email replies, which matches the CWS-disclosed 'Website content' collection; and analytics events (Installs, Opens, OnboardingViewed) are sent to `morning.so` — a product analytics service analogous to — with PII collection explicitly disclosed in the CWS listing. The ML pattern hits (high `js_appendchild`, `js_innerHTML`, `js_fromcharcode`, `js_exclamation`) are fully explained by Parcel bundler IIFEs throughout all seven files, jQuery included in ` `, and React rendering in the UI bundle; no intentional obfuscation was found. Third-party risk likelihood is, the extension is CWS-featured with a 5.0 rating, and no credential theft, remote code loading, or covert data exfiltration was observed. The only material discrepancy is a `tabs` permission present in the bundled v0.0.3 manifest but absent from the live CWS listing, which is consistent with a later update removing it rather than a malicious delta.

Chippy: AI Writer with GPT

Chippy: AI Writer with GPT Chrome extension security report

ID: fbcdphjbmledkhefgamfaleobmegjojl

Supported Languages

🇺🇸English

Extension Info & Metadata

Status
Active
Version
0.1.35
Size
1.35 MB
Rating
5.0/5
Reviews
6
Users
248
Type
Extension
Updated
Oct 11, 2023
Category
Tools
Price
Paid
Featured
Yes
Visibility
Listed
Mature
No
By Google
No
Trusted
Yes
This publisherTrack record
2extensions
1 no longer listed
Scanned by Extension Auditor — Low RiskDevelopers: embed this badge to link to this report.

Publisher Contextual Analysis

Trusted
Author
Chippy
Country
US
MX records exist
Yes
Domain exists
Yes
Is disposable
No
Is role-based
No
Mailbox exists
Yes
Address
401 Smith St Brooklyn, NY 11231-5086 US
Website
Visit
Extensions
2
Active
1
Obsolete
1
Listed
2
Unlisted
0
Users
313

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Screenshots & videos

Screenshot 2
Screenshot 3
Screenshot 4
Screenshot 5
Screenshot 6

Install growth

Item
Type
Severity
Description
https://*/*
Host
Critical
Broad host access — the extension can read/modify content on every website.
Contextual Risk Factors
Risk Factor
High
The following context increases the overall risk:• 10% increase: Early script execution enables pre-emptive content manipulation
storage
Permission
Medium
This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
unlimitedStorage
Permission
Medium
This permission removes storage quota restrictions. Rated Medium because it can store large amounts of user data without limits, potentially impacting browser performance and storing extensive tracking data.
Early Content Script Execution
Risk Factor
Medium
This extension runs content scripts at document_start.

1521 indicators in this extension

1521 indicators
1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

About this extension

Unleash the potential of AI writing and GPT on any website with Chippy — your AI browser assistant. Whether it's answering queries,…

Read the publisher’s full description

Unleash the potential of AI writing and GPT on any website with Chippy — your AI browser assistant. Whether it's answering queries, responding to emails, or fostering idea generation, I'm here to facilitate seamless interactions! Simply press ctrl or cmd + j when you need assistance! Here's how Chippy elevates your browsing experience: 🧑‍💻 AI Writer: Access ChatGPT's prowess on any page, aiding in content creation, and responding smartly on the go! 🧠 On-Page Search: Narrow down your search on the current page for more precise context or information, transcending ChatGPT's knowledge cutoff. 😌 Effortless Input: Forget the tedious copy & paste routine; open Chippy, select the text, and let the automation magic happen! 💡 Suggested prompts: No more staring at a blinking cursor; I'll propel you forward with suggestive prompts and engaging follow-up questions. 🧠 Boost Productivity: Summarize articles, elucidate text, and spark creativity to keep the momentum going. 💻 Programmer Sidekick: Your coding endeavors just got easier with bug fixes, code explanations, syntax guidance, and best practice recommendations. 📜 Translation Helper: Need a translation? Chippy's got your back. 🔒 Privacy-Centric: Your conversations are stored locally, ensuring full control and privacy. For a deeper dive, visit https://chippyai.com Not Affiliated with Microsoft

User reviews

Extension files

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs
314

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

No URLs found
No IP addresses found

1521 indicators in this extension

1521 indicators
1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe
Version
Size
Verdict
Findings
Permhash
0.1.34
Latest
1.35 MBNot scanned—
8e96b886ad85ca879c16aa8b576d61455c82ffa2540faac0aba2996b9ea64991
0.1.33
1.35 MBNot scanned—
8e96b886ad85ca879c16aa8b576d61455c82ffa2540faac0aba2996b9ea64991
0.1.32
1.35 MBNot scanned—
8e96b886ad85ca879c16aa8b576d61455c82ffa2540faac0aba2996b9ea64991
0.1.31
1.35 MBNot scanned—
8e96b886ad85ca879c16aa8b576d61455c82ffa2540faac0aba2996b9ea64991
0.1.3
1.35 MBNot scanned—
8e96b886ad85ca879c16aa8b576d61455c82ffa2540faac0aba2996b9ea64991
0.1.2
1.33 MBNot scanned—
8e96b886ad85ca879c16aa8b576d61455c82ffa2540faac0aba2996b9ea64991
0.0.91
1.22 MBNot scanned—
8e96b886ad85ca879c16aa8b576d61455c82ffa2540faac0aba2996b9ea64991
0.0.8
1.22 MBNot scanned—
9f7c11d75cd886ae29e8774e02ec0d71d90d5a6642904cb16cc1a0622833b949
0.0.7
1.22 MBNot scanned—
9f7c11d75cd886ae29e8774e02ec0d71d90d5a6642904cb16cc1a0622833b949
0.0.6
1.14 MBNot scanned—
9f7c11d75cd886ae29e8774e02ec0d71d90d5a6642904cb16cc1a0622833b949
Showing 1 to 10 of 20 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

More from Chippy

Popular in Tools

Store rankings

Where this extension appears in store category, collection and keyword rankings.