Chrome Web Store
24Versions
1Code reviewed

No malware found

In code review

Our reviewer read this extension’s code and found no malicious behaviour. Review the permissions below before installing.

449 indicators in this extension

449 indicators
1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

What our analysis found

ClickUp: Tasks, Screenshots, Email, Time, used by 200,000 people, showed no malicious code in Extension Auditor's review. Its permissions mean it can read and change data on all websites and can inject scripts into pages. It comes from a trusted publisher and was last updated in August 2025.

Analyst notes

The extension is a legitimate productivity companion for the ClickUp platform, providing task creation, time tracking, screenshots, and email integration. All data flows go to the publisher's own domains ([domain withheld]) or well-known services (Segment, Datadog) with generic events. Broad permissions are necessary for its core features. No unauthorized data exfiltration, code injection, or obfuscation was found.

ClickUp: Tasks, Screenshots, Email, Time

ClickUp: Tasks, Screenshots, Email, Time Chrome extension security report

ID: pliibjocnfmkagafnbkfcimonlnlpghj

Supported Languages

🇺🇸English

Extension Info & Metadata

Status
Active
Version
1.10.18
Size
3.80 MB
Rating
2.7/5
Reviews
359
Users
200,000
Type
Extension
Updated
Aug 25, 2025
Category
Workflow & planning
Price
Free
Featured
No
Visibility
Listed
Mature
No
By Google
No
Trusted
Yes
This publisherTrack record
2extensions
All still listed
Scanned by Extension Auditor — Low RiskDevelopers: embed this badge to link to this report.

Publisher Contextual Analysis

Trusted
Author
Mango Technologies
MX records exist
Yes
Domain exists
Yes
Is disposable
No
Is role-based
No
Mailbox exists
Yes
Extensions
2
Active
2
Obsolete
0
Listed
2
Unlisted
0
Users
210,000

Screenshots & videos

Screenshot 1
Screenshot 2
Screenshot 3
Screenshot 4
Screenshot 5

Install growth

Item
Type
Severity
Description
scripting
Permission
Critical
This permission allows injection and execution of JavaScript on any webpage. Rated Critical because it can modify page content, steal sensitive data, and inject malicious code into any site the extension has access to.
<all_urls>
Host
Critical
Broad host access — the extension can read/modify content on every website.
identity
Permission
High
This permission accesses Chrome identity service and user information. Rated High because it can obtain OAuth tokens, access connected accounts, and impersonate the user in authenticated service.
downloads
Permission
High
This permission controls file downloads and accesses download history. Rated High because it can download malicious files, access sensitive downloaded documents, and track user download patterns.
cookies
Permission
High
This permission provides full access to read and modify browser cookies. Rated High because it can steal session tokens, modify authentication cookies, and compromise accounts across websites.
Contextual Risk Factors
Risk Factor
High
The following context increases the overall risk:• 25% increase: Unsafe code evaluation capabilities increase attack surface
Broad Host Permissions
Risk Factor
High
This extension has broad host permissions allowing it to access many or all websites.
Broad Content Script Access
Risk Factor
High
This extension can inject scripts into any website.
Unsafe WebAssembly Execution
Risk Factor
High
This extension's CSP allows "wasm-unsafe-eval".
storage
Permission
Medium
This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
unlimitedStorage
Permission
Medium
This permission removes storage quota restrictions. Rated Medium because it can store large amounts of user data without limits, potentially impacting browser performance and storing extensive tracking data.
tabs
Permission
Medium
This permission enables tab management and monitoring. Rated Medium because it can track open tabs, access tab metadata, and monitor user browsing patterns.
activeTab
Permission
Medium
This permission grants temporary access to the current tab. Rated Medium because it can access current page content when invoked, though limited to user-initiated actions.
alarms
Permission
Low
This permission schedules periodic tasks. Rated Low because it can only trigger events at specified times without access to sensitive data.
notifications
Permission
Low
This permission displays system notifications. Rated Low because it can only show user-visible notifications without accessing system data.
contextMenus
Permission
Low
This permission adds items to browser context menus. Rated Medium because it only modifies right-click menus without access to page content.

Each row lists a threat category the scanner evaluates. A checkmark means the review ran and found no matching issues in that category for this version.

  • Data Exfiltration

    Code review completed; no malicious patterns detected for this category.

  • Unauthorized Data Collection

    Code review completed; no malicious patterns detected for this category.

  • Network Interception

    Code review completed; no malicious patterns detected for this category.

  • Code Injection

    Code review completed; no malicious patterns detected for this category.

  • Credential Theft

    Code review completed; no malicious patterns detected for this category.

  • Obfuscation

    Code review completed; no malicious patterns detected for this category.

  • Tracking

    Code review completed; no malicious patterns detected for this category.

  • Privilege Escalation

    Code review completed; no malicious patterns detected for this category.

  • Phishing

    Code review completed; no malicious patterns detected for this category.

  • Remote Code Loading

    Code review completed; no malicious patterns detected for this category.

  • Other

    Code review completed; no malicious patterns detected for this category.

449 indicators in this extension

449 indicators
1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

About this extension

ClickUp is a productivity platform that makes your personal and work lives more productive, saving you time.

Read the publisher’s full description

ClickUp's revolutionary Chrome Extension replaces five separate apps, virtually allowing you to do anything! 1. Create Tasks & Save Websites as Tasks 2. Time Tracking: Easily attach time to ClickUp tasks 3. Screenshots: Capture, mark up, and edit screenshots 4. Email: Create tasks and attach emails to tasks 5. Notepad ClickUp is free forever for up to 100MB of files storage. Installing the Chrome Extension 1. Click ADD TO CHROME 2. Click Add extension in the next popup 3. Click the ClickUp extension icon at the top of your browser window. 4. Log in to your ClickUp Account 5. Select the Workspace(s) that should have access Create Tasks & Saves Websites as Tasks Creating a new task 1. Select the "New Task" tab 2. Write a title for your task 3. Add assignees and a due date 4. Write a description for your task. (Pro tip: Use Markdown Shortcuts in your description fast rich text editing) 5. Click Create New Task Bookmark a site as a task 1. Click on the Bookmark tab 2. This automatically sets the page title & URL as the task title 3. You can also add a description here 4. Then you'll also be given the option to attach a screenshot of the website to the task by clicking Include screenshot Set a Default List Save a default destination for tasks making this the fastest way to add new tasks! Time Tracking: Easily attach time to ClickUp tasks Simply locate a task in the extension and select it to begin tracking time. From the Time Spent window, you are able to view time logged on recent tasks and even remove time that was accidentally logged. Back in the ClickUp task, the time has been logged, and we can even start the extension's timer from within the task. Screenshots: capture, mark up, and edit screenshots Capture Capture your entire browser tab or select a certain area to add to a task or download to your computer Attach Attach the file to an existing task or create a new one Mark Up The extension grants you extremely detailed mark up functionality: Paintbrush - draw what you want on top of the screenshot - set a color and brush size Arrow, line, circle, square - quickly add shapes to highlight areas of the screenshot - set a color and brush size Text - add notes right onto a screenshot - set a color, size, and substrate (background) Blur - select an area of the screen you would like to remain hidden. Numbers - drop increasing numbered markers on your screenshot - dragging and dropping allows you to create a box with the number - perfect for sharing steps with a team member Pointer - select things you've already added to the screenshot and make adjustments Undo / Redo Attach to comments 1. Take a screenshot with the Chrome Extension 2. With the screenshot still in the extension, open a task in ClickUp 3. Open the comment editor 4. Click the "Chrome attachment" button Email: Create tasks and attach emails to tasks Capture an email Click the Add to ClickUp button in your email to generate a full HTML record of the email. Attach emails to tasks and create tasks from emails ClickUp will attach the email to a task or create a brand new one with the email attachment included so you can quickly view, jump back, or download the email! For more info, check out our doc on attaching emails to ClickUp! Notepad You can also access your ClickUp notes from any page. Open the extension to the Notepad tab, and all of your notes are available from ClickUp. Your notes will sync across all your devices. Use Markdown Shortcuts and Rich Text in any note. When hovering over a note, you will be able to rename the note, archive, delete, and convert the note to a task. While inside a note, at the bottom are the options to see earlier versions of the note, open the fullscreen editor, as well as the option to convert the note to a task. Floating Button The ClickUp button gives you quick access to the Notepad, Bookmarks, Screenshots, Time Tracking, and creating a task from any webpage. To move the button, click and drag it to any spot on the page. To hide the button, hover over the x icon. You can choose to hide the button for the current session, always for the current website you're on, or turn them off all together.

User reviews

Extension files

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.

URLs
285
IPv4
17

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

No URLs found
No IP addresses found

449 indicators in this extension

449 indicators
1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe
Version
Size
Verdict
Findings
Permhash
1.10.18
Latest
3.80 MBNo malware found0
dd1672618ef2dff90d0a2610b5e1cb22564186ddc03a777f0b4940875183586e
1.10.17
3.87 MBNot scanned—
dd1672618ef2dff90d0a2610b5e1cb22564186ddc03a777f0b4940875183586e
1.10.9
3.81 MBNot scanned—
dd1672618ef2dff90d0a2610b5e1cb22564186ddc03a777f0b4940875183586e
1.10.7
4.32 MBNot scanned—
dd1672618ef2dff90d0a2610b5e1cb22564186ddc03a777f0b4940875183586e
1.10.6
4.32 MBNot scanned—
dd1672618ef2dff90d0a2610b5e1cb22564186ddc03a777f0b4940875183586e
1.10.5
4.32 MBNot scanned—
dd1672618ef2dff90d0a2610b5e1cb22564186ddc03a777f0b4940875183586e
1.10.4
4.32 MBNot scanned—
dd1672618ef2dff90d0a2610b5e1cb22564186ddc03a777f0b4940875183586e
1.10.3
4.32 MBNot scanned—
d5978efc9f3c3253ebd6fc885833b09a49fdc3a0adef1213a752b53bf2f373da
1.10.2
5.74 MBNot scanned—
d5978efc9f3c3253ebd6fc885833b09a49fdc3a0adef1213a752b53bf2f373da
1.9.16
3.35 MBNot scanned—
55455ef9c25a8a104c8dd6a8ac40021aa20790a3d0561c8b9820e303b0486ace
Showing 1 to 10 of 30 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

Gain full insight into all external connections.

Upgrade for full visibility.