Chrome Web StoreNo malware found
In code review
Our reviewer read this extension’s code and found no malicious behaviour. An automated risk flag was reviewed and overturned.
4 indicators in this extension
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
What our analysis found
Codex认证助手, used by 10,000 people, showed no malicious code in Extension Auditor's review. It was last updated in June 2026.
Analyst notes
All source code reviewed confirms the extension does exactly what the CWS listing claims: it GETs the user's active ChatGPT session from [domain withheld] (the declared host_permission) and downloads the session data as using chrome.downloads.download() with a data: URI — purely local delivery with no external transmission. The bundled manifest is identical to the published manifest (no mismatch). The ML model over-fitted on the combination of a credential-endpoint GET request, base64 encoding (used for standard JWT construction in:222-231), and the downloads permission — all of which are legitimately required for this tool's stated Codex CLI auth-export purpose.
Codex认证助手 Chrome extension security report
ID: ceenjghooaemkocekdaaianapgmmilph
Supported Languages
Extension Info & Metadata
Publisher Contextual Analysis
- Author
- StarRiver
- Privacy
- Privacy Policy
- MX records exist
- Yes
- Domain exists
- Yes
- Is disposable
- No
- Is role-based
- No
- Mailbox exists
- Yes
- Website
- Visit
Screenshots & videos
Install growth
Each row lists a threat category the scanner evaluates. A checkmark means the review ran and found no matching issues in that category for this version.
Data Exfiltration
Code review completed; no malicious patterns detected for this category.
Unauthorized Data Collection
Code review completed; no malicious patterns detected for this category.
Network Interception
Code review completed; no malicious patterns detected for this category.
Code Injection
Code review completed; no malicious patterns detected for this category.
Credential Theft
Code review completed; no malicious patterns detected for this category.
Obfuscation
Code review completed; no malicious patterns detected for this category.
Tracking
Code review completed; no malicious patterns detected for this category.
Privilege Escalation
Code review completed; no malicious patterns detected for this category.
Phishing
Code review completed; no malicious patterns detected for this category.
Remote Code Loading
Code review completed; no malicious patterns detected for this category.
Other
Code review completed; no malicious patterns detected for this category.
4 indicators in this extension
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
About this extension
安全地在本地导出您的已登录 ChatGPT 会话配置，生成符合 Codex 规范的 auth.json 本地备份文件。纯本地离线处理。
Read the publisher’s full description
这是一款专为 Codex 开发者设计的凭证管理与配置文件备份辅助工具。 通过高度安全的本地沙盒机制，本插件能够帮助您在本地浏览器中，将已经成功登录的会话凭证快速一键导出，并自动转换为符合 Codex 运行规范的 auth.json 配置文件。 核心功能： 1. 本地状态检测：智能检测本地会话的授权状态及精确剩余有效期，支持秒级倒计时提醒。 2. 一键格式转换：自动化将 Session Token 组装并合成为规范的 Synthetic 签名格式。 3. 纯本地安全下载：采用闭环 Data URL 技术，生成的数据直接通过浏览器沙盒下载至本机，不经过任何第三方服务器。 【数据安全与隐私承诺】 本插件承诺绝对保护您的隐私： - 零外部数据传输：不含任何远程上传接口，所有数据转换、格式化与下载均在您本机的浏览器进程内完成（即“数据不上云”）。 - 权限最小化：仅申请 downloads 权限以执行本地文件保存，无多余后台定位或持久化拦截行为。 - 开源且透明。 声明：本插件为第三方开源辅助工具，旨在方便开发者进行本地配置备份，与 OpenAI、GitHub 或 Codex 官方无任何商业或行政关联。
User reviews
Extension files
Browse and explore files within this extension package
Gain full insight into all external connections.
Upgrade for full visibility.
URLs
View the external URLs this extension communicates with to understand its network activity and data interactions.
4 indicators in this extension
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
Gain full insight into all external connections.
Upgrade for full visibility.
Related extensions
Popular in Tools
- Montara Chrome Extension639,000,000 users
- 迅雷下载支持88,000,000 users
- Passlit Openbook10,000,000 users
- Zotero Connector9,000,000 users
- Browsec VPN - Free VPN for Chrome8,000,000 users