Chrome Web Store
44Versions
1Code reviewed

No malware found

In code review (v3.6)

Our reviewer read version 3.6 — the most recent version we have reviewed — and found no malicious behaviour. The version shown here has not been individually reviewed yet.

200 indicators in this extension

200 indicators
1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

What our analysis found

CS2 Trader - Steam Trading Enhancer, used by 300,000 people, showed no malicious code in Extension Auditor's review. It comes from a trusted publisher and was last updated in September 2026.

Analyst notes

The extension is a legitimate:GO trading enhancer. All network requests target only Steam, the extension's own domains ([domain withheld]), and user-configured optional services (Discord, [domain withheld]). The use of offscreen is for audio playback, and the unsafe-wasm-eval CSP is for the client-side FadeCalculator. High manipulation is standard for UI injection on Steam pages and uses DOMPurify. No evidence of data exfiltration, credential theft, or unauthorized code injection was found. The ML risk score of 0.00 is corroborated by the clean permhash cluster (0% flagged) and the publisher's trusted status.

CS2 Trader - Steam Trading Enhancer

CS2 Trader - Steam Trading Enhancer Chrome extension security report

ID: kaibcgikagnkfgjnibflebpldakfhfih

Supported Languages

🇺🇸English

Extension Info & Metadata

Status
Active
Version
3.7
Size
7.44 MB
Rating
4.0/5
Reviews
144
Users
300,000
Type
Extension
Updated
Sep 6, 2026
Category
Workflow & planning
Price
Free
Featured
Yes
Visibility
Listed
Mature
No
By Google
No
Trusted
Yes
This publisherTrack record
1extension
All still listed
Scanned by Extension Auditor — Low RiskDevelopers: embed this badge to link to this report.

Publisher Contextual Analysis

Trusted
Author
csgotrader.app
MX records exist
Yes
Domain exists
Yes
Is disposable
No
Is role-based
Yes
Mailbox exists
Yes
Website
Visit
Extensions
1
Active
1
Obsolete
0
Listed
1
Unlisted
0
Users
300,000

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Screenshots & videos

Screenshot 2
Screenshot 3
Screenshot 4
Screenshot 5
Screenshot 6

Install growth

Item
Type
Severity
Description
offscreen
Permission
High
This permission creates hidden browser documents with full DOM access. Rated High because it can run background operations invisibly, potentially executing malicious code without user awareness.
Contextual Risk Factors
Risk Factor
High
The following context increases the overall risk:• 20% increase: Access to sensitive domains increases potential impact• 25% increase: Unsafe code evaluation capabilities increase attack surface
Unsafe WebAssembly Execution
Risk Factor
High
This extension's CSP allows "wasm-unsafe-eval".
storage
Permission
Medium
This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
unlimitedStorage
Permission
Medium
This permission removes storage quota restrictions. Rated Medium because it can store large amounts of user data without limits, potentially impacting browser performance and storing extensive tracking data.
*://steamcommunity.com/*
Host
Medium
Host permission — access limited to this URL pattern.
*://api.steampowered.com/*
Host
Medium
Host permission — access limited to this URL pattern.
*://api.csgotrader.app/*
Host
Medium
Host permission — access limited to this URL pattern.
*://prices.csgotrader.app/*
Host
Medium
Host permission — access limited to this URL pattern.
Access to Sensitive Domains
Risk Factor
Medium
This extension requests access to sensitive domains: *://steamcommunity.com/market/listings/*, *://steamcommunity.com/app/*/tradingforum/*
notifications
Permission
Low
This permission displays system notifications. Rated Low because it can only show user-visible notifications without accessing system data.
alarms
Permission
Low
This permission schedules periodic tasks. Rated Low because it can only trigger events at specified times without access to sensitive data.

200 indicators in this extension

200 indicators
1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

About this extension

Extension to help with CS2 trading, trade-lock countdown, in-browser inspect, doppler phases, prices, float values, etc

Read the publisher’s full description

CSGO Trader is an open source browser extension that is designed to help with CS:GO trading. I started by adding functionality that Steam Inventory Helper lacked, but it already has SIH's most important features and much more. Check the video or visit https://csgotrader.app for feature showcasing! An incomplete list of current features: - Pricing info in inventories and trade offers - Total inventory value, trade offer value - Show profit for incoming trade offers, order by most profitable first - "Inspect in Browser..." button on market, inventories and trade offers - Item mass listing/selling - Shows when an item's trade lock will expire and adds a countdown - Shows floats and other technical info like paint index, paint seed, pattern index in inventories, offers and on the market - Order by float value on market pages, show more than the default 10 listings on the market - Doppler phases, fade percentages, marble fade patterns (fire and ice, blue tip, red tip, etc.) - Shows exterior on each item and adds links to other version to inventory and market pages - NSFW filter mode to avoid showing unsavoury things to your colleagues - Bookmark an item and get a notification when it is ready to trade - Real chat status on profiles (away, busy, snooze instead of just online) - Colorful inventories, changes each items' background based on its rarity - Scammers are market on their profile and in trade offers (if they are SteamRep banned) - CSGOLounge.com auto-bumping, make your trades more popular by keeping them on top - CSGOTraders.net auto-bumping, make your trades more popular by keeping them on top - Add or remove similar items from a trade, add whole page, add all similar items - Pricing providers: CSGO Trader, CSGOBACKPACK, CS.MONEY, Bitskins, LOOT.FARM, CSGO.TM - See the original currency and price an item was listed on the market - "Starting at" price info and sales volume info in everyone's inventory - Instant accept trade offer and decline trade offer buttons on the incoming trade offers page - Float rank (like 5th best in existence) data from csgofloat - Currency converter, percentage calculator in the extension popup. - Report known spam and scam comments automatically (like fake giveaway comments on profiles) - Reply to comments by tagging the other user's name - Generate a list of inventory items (to post advertisements, etc.) - +rep button on profiles to post your reputation message after trade - Check the value of multiple items in an inventory by selecting them - Sort inventories and trade offers by price, tradability, name or position - Set default sorting mode for inventories and trade offers - All inventory items are loaded automatically, no need to wait for loading when searching or switching pages - Sticker wear (condition percentage) in inventories and on the market - Copy a user's permanent profile link (scammers often change their links automatically) - Duplicate items count in inventories - Set rules to for incoming friend requests (accept, ignore or block on matching conditions) - See if an item is present in another offer - Auto-bump your Steam trading posts in groups and forums - Other small features, automations, conveniences If you want to know why the extension requires the permissions it needs, read: https://csgotrader.app/faq/#permissions Feel free to contribute (with code, graphics, translations or even with ideas) Changelog at: https://csgotrader.app/changelog/ The open source code is available at: https://github.com/gergelyszabo94/csgo-trader-extension Steam Group: https://steamcommunity.com/groups/csgotraderextension The developer: https://www.gergely-szabo.com/ Email support@csgotrader.app for bug reports, questions and assistance.

User reviews

Extension files

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs
200

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

No URLs found
No IP addresses found

200 indicators in this extension

200 indicators
1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe
Version
Size
Verdict
Findings
Permhash
3.7
Latest
7.44 MBNot scanned—
12f82d2f5af4b152d7ed8ba2502cfe6642f42b1396661f9b028afcdcc0a61c17
3.6.1
6.29 MBNot scanned—
12f82d2f5af4b152d7ed8ba2502cfe6642f42b1396661f9b028afcdcc0a61c17
3.6
6.31 MBNo malware found0
12f82d2f5af4b152d7ed8ba2502cfe6642f42b1396661f9b028afcdcc0a61c17
3.5.3
6.40 MBNot scanned—
12f82d2f5af4b152d7ed8ba2502cfe6642f42b1396661f9b028afcdcc0a61c17
3.5.2
6.41 MBNot scanned—
12f82d2f5af4b152d7ed8ba2502cfe6642f42b1396661f9b028afcdcc0a61c17
3.5.1
6.40 MBNot scanned—
12f82d2f5af4b152d7ed8ba2502cfe6642f42b1396661f9b028afcdcc0a61c17
3.5
6.41 MBNot scanned—
12f82d2f5af4b152d7ed8ba2502cfe6642f42b1396661f9b028afcdcc0a61c17
3.4.1
6.34 MBNot scanned—
12f82d2f5af4b152d7ed8ba2502cfe6642f42b1396661f9b028afcdcc0a61c17
3.4
6.32 MBNot scanned—
12f82d2f5af4b152d7ed8ba2502cfe6642f42b1396661f9b028afcdcc0a61c17
3.3.3
6.31 MBNot scanned—
12f82d2f5af4b152d7ed8ba2502cfe6642f42b1396661f9b028afcdcc0a61c17
Showing 1 to 10 of 50 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.