Extension Auditor
Sign Up
Chrome Web Store
10Versions
0Code reviewed

Not reviewed

No code review on record

We have not reviewed this extension’s code, so we cannot vouch for it either way. Check the permissions below to decide whether it asks for more than it needs.

Want us to read this extension's code? Ask for a review and we'll queue it.

What our analysis found

Ghast AI is not yet reviewed by Extension Auditor. Its permissions mean it can inject scripts into pages. It was last updated in May 2026.

Ghast AI

Ghast AI Chrome extension security report

ID: nnhdkkgpoeojjddikcjadgpkbfbjhcal

Supported Languages

🇺🇸English

Extension Info & Metadata

Status
Active
Version
0.1.9
Size
9.95 MB
Rating
5.0/5
Reviews
1
Users
239
Type
Extension
Updated
May 5, 2026
Category
Tools
Price
Free
Featured
No
Visibility
Listed
Mature
No
By Google
No
Trusted
No
Download CRX
Chrome Web Store
Report Issue
This publisherTrack record
1extension
All still listed

Publisher Contextual Analysis

Author
TrapezoheAI
Privacy
Privacy Policy
MX records exist
Yes
Domain exists
Yes
Is disposable
No
Is role-based
No
Mailbox exists
Yes
Website
Visit
Extensions
1
Active
1
Obsolete
0
Listed
1
Unlisted
0
Users
239

Screenshots & videos

Screenshot 1
Screenshot 2
Screenshot 3
Screenshot 4
Screenshot 5
Screenshot 6
Screenshot 7
Screenshot 8
Screenshot 9

Install growth

Item
Type
Severity
Description
scripting
Permission
Critical
This permission allows injection and execution of JavaScript on any webpage. Rated Critical because it can modify page content, steal sensitive data, and inject malicious code into any site the extension has access to.
nativeMessaging
Permission
High
This permission enables communication with applications installed on your computer. Rated High because it can exchange data with native programs, potentially exposing system-level information and local files.
identity
Permission
High
This permission accesses Chrome identity service and user information. Rated High because it can obtain OAuth tokens, access connected accounts, and impersonate the user in authenticated service.
Contextual Risk Factors
Risk Factor
High
The following context increases the overall risk: • 19% increase: Access to sensitive domains increases potential impact • 25% increase: Unsafe code evaluation capabilities increase attack surface
Unsafe WebAssembly Execution
Risk Factor
High
This extension's CSP allows "wasm-unsafe-eval".
storage
Permission
Medium
This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
unlimitedStorage
Permission
Medium
This permission removes storage quota restrictions. Rated Medium because it can store large amounts of user data without limits, potentially impacting browser performance and storing extensive tracking data.
activeTab
Permission
Medium
This permission grants temporary access to the current tab. Rated Medium because it can access current page content when invoked, though limited to user-initiated actions.
tabs
Permission
Medium
This permission enables tab management and monitoring. Rated Medium because it can track open tabs, access tab metadata, and monitor user browsing patterns.
https://*.0g.ai/*
Host
Medium
Host permission — access limited to this URL pattern.
https://chainscan.0g.ai/*
Host
Medium
Host permission — access limited to this URL pattern.
https://*.integratenetwork.work/*
Host
Medium
Host permission — access limited to this URL pattern.
https://*.etherscan.io/*
Host
Medium
Host permission — access limited to this URL pattern.
https://*.bscscan.com/*
Host
Medium
Host permission — access limited to this URL pattern.
https://*.polygonscan.com/*
Host
Medium
Host permission — access limited to this URL pattern.
https://*.arbiscan.io/*
Host
Medium
Host permission — access limited to this URL pattern.
https://app.uniswap.org/*
Host
Medium
Host permission — access limited to this URL pattern.
https://*.aave.com/*
Host
Medium
Host permission — access limited to this URL pattern.
https://*.lido.fi/*
Host
Medium
Host permission — access limited to this URL pattern.
https://*.sushi.com/*
Host
Medium
Host permission — access limited to this URL pattern.
https://*.compound.finance/*
Host
Medium
Host permission — access limited to this URL pattern.
https://*.curve.fi/*
Host
Medium
Host permission — access limited to this URL pattern.
https://*.pancakeswap.finance/*
Host
Medium
Host permission — access limited to this URL pattern.
https://x.com/*
Host
Medium
Host permission — access limited to this URL pattern.
https://twitter.com/*
Host
Medium
Host permission — access limited to this URL pattern.
https://discord.com/*
Host
Medium
Host permission — access limited to this URL pattern.
https://ilinkai.weixin.qq.com/*
Host
Medium
Host permission — access limited to this URL pattern.
https://*.weixin.qq.com/*
Host
Medium
Host permission — access limited to this URL pattern.
https://www.googleapis.com/*
Host
Medium
Host permission — access limited to this URL pattern.
https://www.google.com/*
Host
Medium
Host permission — access limited to this URL pattern.
https://*.trapezohe.ai/*
Host
Medium
Host permission — access limited to this URL pattern.
https://raw.githubusercontent.com/*
Host
Medium
Host permission — access limited to this URL pattern.
https://api.github.com/*
Host
Medium
Host permission — access limited to this URL pattern.
https://pub-6c87d0ddc0de485caf0c5695e4b922db.r2.dev/*
Host
Medium
Host permission — access limited to this URL pattern.
https://clawhub.ai/*
Host
Medium
Host permission — access limited to this URL pattern.
https://wry-manatee-359.convex.cloud/*
Host
Medium
Host permission — access limited to this URL pattern.
https://api.search.brave.com/*
Host
Medium
Host permission — access limited to this URL pattern.
http://localhost/*
Host
Medium
Host permission — access limited to this URL pattern.
http://127.0.0.1/*
Host
Medium
Host permission — access limited to this URL pattern.
Access to Sensitive Domains
Risk Factor
Medium
This extension requests access to sensitive domains: https://twitter.com/*, https://www.googleapis.com/*, https://www.google.com/*, https://raw.githubusercontent.com/*, https://api.github.com/*
sidePanel
Permission
Low
This permission adds custom panels to the browser interface. Rated Low because it only affects browser UI elements and cannot access page content.
alarms
Permission
Low
This permission schedules periodic tasks. Rated Low because it can only trigger events at specified times without access to sensitive data.
contextMenus
Permission
Low
This permission adds items to browser context menus. Rated Medium because it only modifies right-click menus without access to page content.
notifications
Permission
Low
This permission displays system notifications. Rated Low because it can only show user-visible notifications without accessing system data.
bookmarks
Permission
Low
This permission manages browser bookmarks and folders. Rated Low because it can only modify bookmark data, which is not sensitive and changes are visible to users.

About this extension

Web3-native AI assistant powered by 0G Ntework

Read the publisher’s full description

Ghast AI is a revolutionary Web3 AI assistant designed to bring the capabilities of OpenClaw to everyone—without the complex server setup. In just one click, you get a powerful, privacy-preserving AI companion that integrates seamlessly with your Web3 workflow. Why Choose Ghast AI? 🚀 Zero-Config Deployment Forget about renting servers or configuring API keys. Ghast AI installs in seconds and works immediately. It's the "On-chain OpenClaw" experience made accessible for everyone. 🔐 True Data Sovereignty Your data belongs to you. Unlike Web2 AI tools, Ghast AI leverages TEE (Trusted Execution Environment) and Decentralized Storage (0G) to ensure your conversations and memories are encrypted and private. 💎 Assetize Your AI Memory (iNFT) Turn your AI's unique personality and knowledge base into an iNFT (intelligent NFT). Your AI's memory is a valuable asset that you can own, transfer, or trade on the marketplace. 🤖 Web3-Native Skills Ghast AI understands the blockchain world. Use it to: Analyze smart contracts and DeFi strategies. Check wallet balances and transaction history. Interact with dApps seamlessly. Key Features: Multi-Model Support: Access top-tier models like GLM-4, Llama 3, and more via a decentralized model pool. Persistent Memory: Your AI remembers your preferences and context across sessions. Privacy First: No central server stores your unencrypted chats. One-Click Plugin: Lightweight Chrome extension with a smooth, user-friendly interface. Join the Web3 AI Revolution. Website: https://ghast.trapezohe.ai/ Twitter: @TrapezoheAI

User reviews

Extension files

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.

Sign In

No network indicators were extracted from this version.

Version
Size
Verdict
Findings
Permhash
0.1.9
Latest
9.95 MBNot scanned—
6dc2ef93a444649a014cf419379c529415a4c3f67f0021dfa02fa7ba5679cc6d
0.1.8
5.13 MBNot scanned—
6dc2ef93a444649a014cf419379c529415a4c3f67f0021dfa02fa7ba5679cc6d
0.1.7
3.64 MBNot scanned—
6dc2ef93a444649a014cf419379c529415a4c3f67f0021dfa02fa7ba5679cc6d
0.1.6
3.37 MBNot scanned—
6dc2ef93a444649a014cf419379c529415a4c3f67f0021dfa02fa7ba5679cc6d
0.1.5
4.13 MBNot scanned—
6dc2ef93a444649a014cf419379c529415a4c3f67f0021dfa02fa7ba5679cc6d
0.1.4
3.88 MBNot scanned—
6dc2ef93a444649a014cf419379c529415a4c3f67f0021dfa02fa7ba5679cc6d
0.1.3
3.01 MBNot scanned—
81f6653a7c6d0a884f7ac80733c856c2bfbd4edbbf61b192eda3a9360d040e47
0.1.2
2.94 MBNot scanned—
81f6653a7c6d0a884f7ac80733c856c2bfbd4edbbf61b192eda3a9360d040e47
0.1.1
2.88 MBNot scanned—
81f6653a7c6d0a884f7ac80733c856c2bfbd4edbbf61b192eda3a9360d040e47
0.1.0
1.93 MBNot scanned—
81f6653a7c6d0a884f7ac80733c856c2bfbd4edbbf61b192eda3a9360d040e47
Showing 1 to 10 of 10 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

Gain full insight into all external connections.

Upgrade for full visibility.

Sign In