Chrome Web StoreNo malware found
In code review (v0.4.2)
Our reviewer read version 0.4.2 — the most recent version we have reviewed — and found no malicious behaviour. The version shown here has not been individually reviewed yet.
What our analysis found
chrome-use, used by 2,000 people, showed no malicious code in Extension Auditor's review. It comes from a publisher with 3 extensions and was last updated in November 2026.
Analyst notes
The source code is entirely consistent with the extension's stated purpose — a local browser automation bridge that relays Chrome DevTools Protocol commands from a locally-installed CLI over native messaging. makes zero outbound network requests; every message goes through chrome.runtime.connectNative('com.agent_browser.connect'), which is a local IPC channel authenticated by Chrome itself. The debugger and nativeMessaging permissions are the expected core of this tool and not evidence of malice. The ML score is driven entirely by the permission feature vector, not by any observable malicious behavior; no obfuscation, no exfiltration endpoints, no remote payloads, and no deviation from the declared CWS description exist anywhere in the codebase.
chrome-use Chrome extension security report
ID: knfcmbamhjmaonkfnjhldjedeobeafmk
Supported Languages
Extension Info & Metadata
Publisher Contextual Analysis
- Author
- leeguooooo
- Privacy
- Privacy Policy
- Help
- Help Center
- MX records exist
- Yes
- Domain exists
- Yes
- Is disposable
- Yes
- Is role-based
- No
- Mailbox exists
- Yes
- Website
- Visit
Screenshots & videos
Install growth
No Security Analysis Available
Security analysis has not been performed for this extension version yet.
About this extension
Browser automation with the local chrome-use CLI and your local Codex, Claude Code, OpenCode or Pi agent.
Read the publisher’s full description
agent-browser-stealth is the in-browser half of the open-source agent-browser CLI. It lets the command-line tool you installed on this same computer automate the Chrome you're already logged into — opening pages, clicking, filling forms, reading the DOM — driven entirely by you. How it works - The extension talks ONLY to the local agent-browser CLI over Chrome native messaging (a local inter-process channel — no network socket, no token, no remote server). - When you run an automation command, the extension relays Chrome DevTools Protocol operations to the tab you target, then returns the result to the CLI. Privacy - No analytics, no trackers, no data collection. - Nothing is sent to any remote server. The only message peer is the local CLI. - Source is open (Apache-2.0): https://github.com/leeguooooo/agent-browser-stealth You need the agent-browser CLI installed and paired (run: agent-browser extension install) for this extension to do anything.
User reviews
Extension files
Browse and explore files within this extension package
Gain full insight into all external connections.
Upgrade for full visibility.
No network indicators were extracted from this version.
Code Diff
Compare extension code between any two versions.
0 changed files detected
No comparable text files found between these versions.
Gain full insight into all external connections.
Upgrade for full visibility.
Related extensions
More from leeguooooo
- Cross Request Master3,000 users
- 知乎账号切换工具37 users
Popular in productivity/tools
- Torrent Scanner8,000,000 users
- Sider: Chat with all AI: GPT-5, Claude, DeepSeek, Gemini, Grok5,000,000 users
- Monica: All-In-One AI Assist & Smartest AI Agent3,000,000 users
- Browsing Protection2,000,000 users
- PrintFriendly: Print, PDF Editor & Full Page Screenshot1,000,000 users