Chrome Web Store
4Versions
1Code reviewed

No malware found

In code review (v3.4.5)

Our reviewer read version 3.4.5 — the most recent version we have reviewed — and found no malicious behaviour. The version shown here has not been individually reviewed yet.

What our analysis found

Diigo Web Collector - Capture and Annotate, used by 300,000 people, showed no malicious code in Extension Auditor's review. Its permissions mean it can read and change data on all websites and can inject scripts into pages. It comes from a trusted publisher and was last updated in June 2024.

The extension's source code performs exactly the functions described: bookmarking, annotating, capturing web pages. All network communications go to the publisher's own domain () or to Google Analytics for usage tracking. There is no evidence of data exfiltration to unauthorized third parties, no malicious code injection, and no credential theft. The broad permissions are necessary for the extension's operation and are consistent with the stated purpose. The ML model likely flagged the extension due to broad permissions and high regex pattern counts from bundled libraries and legitimate functionality.

Diigo Web Collector - Capture and Annotate

Diigo Web Collector - Capture and Annotate Chrome extension security report

ID: pnhplgjpclknigjpccbcnmicgcieojbh

Supported Languages

🇺🇸English

Extension Info & Metadata

Status
Active
Version
3.5.0
Size
5.47 MB
Rating
4.6/5
Reviews
2,323
Users
300,000
Type
Extension
Updated
Jun 30, 2024
Category
Workflow & planning
Price
Free
Featured
Yes
Visibility
Listed
Mature
No
By Google
No
Trusted
Yes
This publisherTrack record
1extension
All still listed
Scanned by Extension Auditor — Low RiskDevelopers: embed this badge to link to this report.

Publisher Contextual Analysis

Trusted
Author
diigo.com
MX records exist
Yes
Domain exists
Yes
Is disposable
No
Is role-based
No
Mailbox exists
Yes
Website
Visit
Extensions
1
Active
1
Obsolete
0
Listed
1
Unlisted
0
Users
300,000

Screenshots & videos

Screenshot 2
Screenshot 3
Screenshot 4
Screenshot 5

Install growth

Item
Type
Severity
Description
scripting
Permission
Critical
This permission allows injection and execution of JavaScript on any webpage. Rated Critical because it can modify page content, steal sensitive data, and inject malicious code into any site the extension has access to.
<all_urls>
Host
Critical
Broad host access — the extension can read/modify content on every website.
cookies
Permission
High
This permission provides full access to read and modify browser cookies. Rated High because it can steal session tokens, modify authentication cookies, and compromise accounts across websites.
Broad Host Permissions
Risk Factor
High
This extension has broad host permissions allowing it to access many or all websites.
Broad Content Script Access
Risk Factor
High
This extension can inject scripts into any website.
tabs
Permission
Medium
This permission enables tab management and monitoring. Rated Medium because it can track open tabs, access tab metadata, and monitor user browsing patterns.
storage
Permission
Medium
This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
pageCapture
Permission
Medium
This permission enables saving complete web pages as MHTML. Rated Medium because it can archive sensitive web content, capture full page data, and store browsing history artifacts.
https://www.diigo.com/
Host
Medium
Host permission — access limited to this URL pattern.
contextMenus
Permission
Low
This permission adds items to browser context menus. Rated Medium because it only modifies right-click menus without access to page content.

Gain full insight into all external connections.

Upgrade for full visibility.

About this extension

Bookmark, Archive, Screenshot & Markup - All-In-One Web Collector, must-have research tool

Read the publisher’s full description

Diigo is the #1 extension for annotating, archiving and bookmarking webpages. With this easy-to-use tool, you can 1. Bookmark links to archive webpages or to read later 2. Attach highlights & stickies to a webpage as a reminder 3. Share pages with annotation via Twitter, Facebook, Google Buzz 4. Access anywhere, via iPhone, iPad (http://bit.ly/e2ujpL), Android (http://goo.gl/tvbuq). 5. Create groups to pool findings, share resources or curate content 6. Automatically cross-post to social bookmarking site Delicious (optional) 【For Those with Privacy Concern 】 Chrome will alert you that the extension may access all your data. Here is the whole story: This extension has bookmark, highlight and add sticky note features. These features need the privilege to access your pages. However, we never collect any of your data unless you select some content and choose to send it to diigo. Don't worry. We are also internet users and don't want to be evil. Recent updates * More robust twitter OAuth * [new] Search your Diigo library simultaneously while searching google * [new option] Load bookmarking info automatically. When enabled, the browser action icon will indicate whether current page is bookmarked. * [new] Upload cache page. Save a copy of the web page to My Library. * Diigo+Google search in context menu: Select some text, right click and search your library! (can be disabled in options) * New option: "Show highlights automatically". When enabled, annotations on a page will be displayed automatically 【Bug Report and Suggestions】 We appreciate and receive many user suggestions and requests for improvements. If you have features you would like to see added, or experience a bug for reporting, please send us e-mail at 【developer@diigo.com】. Doing so will allow us to consider any improvements and correct any bugs as soon as possible. Thank you! 【More Great Chrome Apps/Extensions by Diigo】 Check them out: http://bit.ly/hDJ5se You won't be disappointed! Changelog: http://appchangelog.com/extension/2/Diigo-Web-Collector-Capture-and-Annotate

User reviews

Extension files

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.

URLs
130
IPv4
16

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

No URLs found
No IP addresses found

Gain full insight into all external connections.

Upgrade for full visibility.

Version
Size
Verdict
Findings
Permhash
3.4.8
Latest
5.31 MBNot scanned—
0a5dba6eaba2da44a773074d0340ee0d175380615425986c4d88799c462ef47d
3.4.6
5.30 MBNot scanned—
0a5dba6eaba2da44a773074d0340ee0d175380615425986c4d88799c462ef47d
3.4.5
5.30 MBNo malware found0
0a5dba6eaba2da44a773074d0340ee0d175380615425986c4d88799c462ef47d
3.5.0
5.47 MBNot scanned—
0ab7b9e947018f3dfcfe2fbe5f6e318033868894588d9cfa3c1b376994df6233
Showing 1 to 4 of 10 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

Gain full insight into all external connections.

Upgrade for full visibility.

Popular in Workflow & Planning