Chrome Web Store
36Versions
0Code reviewed

Not reviewed

No code review on record

We have not reviewed this extension’s code, so we cannot vouch for it either way. Check the permissions below to decide whether it asks for more than it needs.

Want us to read this extension's code? Ask for a review and we'll queue it.

1112 indicators in this extension

1112 indicators
0 versions analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

What our analysis found

GoLess: Browser Automation and Web Scraping, used by 2,000 people, is not yet reviewed by Extension Auditor. Its permissions mean it can read and change data on all websites and can inject scripts into pages. It comes from a trusted publisher and was last updated in February 2024.

GoLess: Browser Automation and Web Scraping

GoLess: Browser Automation and Web Scraping Chrome extension security report

ID: ghlmiigebgipgagnhlanjmmniefbfihl

Supported Languages

🇺🇸English

Extension Info & Metadata

Status
Active
Version
1.2.28
Size
12.03 MB
Rating
4.3/5
Reviews
18
Users
2,000
Type
Extension
Updated
Feb 9, 2024
Category
Workflow & planning
Price
Free
Featured
Yes
Visibility
Listed
Mature
No
By Google
No
Trusted
Yes
This publisherTrack record
1extension
All still listed

Publisher Contextual Analysis

Trusted
Author
goless.com
MX records exist
Yes
Domain exists
Yes
Is disposable
No
Is role-based
Yes
Mailbox exists
Yes
Website
Visit
Extensions
1
Active
1
Obsolete
0
Listed
1
Unlisted
0
Users
2,000

Screenshots & videos

Screenshot 1
Screenshot 2
Screenshot 3
Screenshot 4

Install growth

Item
Type
Severity
Description
proxy
Permission
Critical
This permission allows the extension to control the browser's proxy settings. Rated Critical because it can route all traffic through potentially malicious proxies, enabling man-in-the-middle attacks and traffic monitoring.
debugger
Permission
Critical
This permission grants the extension ability to debug and control other extensions and browser tabs. Rated Critical because it can access and modify other extensions' internal state, inject code, and access sensitive data from any tab.
scripting
Permission
Critical
This permission allows injection and execution of JavaScript on any webpage. Rated Critical because it can modify page content, steal sensitive data, and inject malicious code into any site the extension has access to.
<all_urls>
Host
Critical
Broad host access — the extension can read/modify content on every website.
cookies
Permission
High
This permission provides full access to read and modify browser cookies. Rated High because it can steal session tokens, modify authentication cookies, and compromise accounts across websites.
webNavigation
Permission
High
This permission enables monitoring of all browser navigation events and transitions. Rated High because it can track every page visit, navigation method, and browsing pattern, potentially exposing sensitive browsing behavior and user activities.
Contextual Risk Factors
Risk Factor
High
The following context increases the overall risk:• 10% increase: Early script execution enables pre-emptive content manipulation• 10% increase: About:blank access enables potential sandbox escape vectors
Broad Host Permissions
Risk Factor
High
This extension has broad host permissions allowing it to access many or all websites.
Broad Content Script Access
Risk Factor
High
This extension can inject scripts into any website.
tabs
Permission
Medium
This permission enables tab management and monitoring. Rated Medium because it can track open tabs, access tab metadata, and monitor user browsing patterns.
storage
Permission
Medium
This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
unlimitedStorage
Permission
Medium
This permission removes storage quota restrictions. Rated Medium because it can store large amounts of user data without limits, potentially impacting browser performance and storing extensive tracking data.
Early Content Script Execution
Risk Factor
Medium
This extension runs content scripts at document_start.
About:blank Access
Risk Factor
Medium
This extension can run content scripts in about:blank pages.
alarms
Permission
Low
This permission schedules periodic tasks. Rated Low because it can only trigger events at specified times without access to sensitive data.

1112 indicators in this extension

1112 indicators
0 versions analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

About this extension

GoLess no-code browser automation and Robotic Process Automation (RPA) tool

Read the publisher’s full description

GoLess tool allows you to quickly automate website actions and other tasks, eliminating the need for coding, APIs, or developers. Simply use clicking and typing on the user interface of websites and web apps to perform automation. GoLess enables you to: ◦ Easily scrape data from any website ◦ Easy data entry into web forms ◦ Integrate with Google Sheets for reading and writing data ◦ Collaborate and share your automations with other users Create automations: ◦ Data scraping and entry ◦ ETL processes (Extract, Transform and Load tasks) ◦ Building social media bots ◦ Transferring data between applications ◦ Automating workflows within web apps without the need for APIs Changelog Release 1.2.28 Fixes: - Removed reuseLastState setting Release 1.2.27 Fixes: - Fixed validation for masked string input - Removed "required parameters" for checkbox and googleDrive parameters Release 1.2.26 Features: - Notification if active-tab on the dashboard page (handleActiveTab error) - Validation for UiInput, validators - Validation error output Fixes: - OpenDashboard on background for executing workflow - Timeout for notify - Remove logic with window defocusing Release 1.2.25 Features: - Changed app sidebar - Added shortcut for /packages page Fixes: - /run route for Gologin automations - Fixed some errors Release 1.2.24 Features: - Added "Empty block" for all tables Fixes: - Removed hotkeys for "search" and "new workflow" - Adjusted padding for trigger modal, corrected ui-popover placement. - Ensured extension execution after updating route to /run. Release 1.2.23 Features: - Added "selector" type for parameters Fixes: - Authoma updates from version 1.28.6 to 1.28.10 - Fixes for dark theme - Fixes for search input field - Change of "Execute" button inside workflow Release 1.2.22 Fixes: - Sort 'Installed At' - Execution of the elementSelector - Workflow execution if dashboard is not running - Size when opening the dashboard window - Opening dashboard after install Release 1.2.21 Features: - Images open in a new window when clicked on for public workflows - Options in logs for the /logs route - Open workflow by clicking the icon in the workflow card on the start screen - Open a public workflow on the site by clicking on the workflow modal Fixes: - Display role when sharing workflow for editor (reviewer) - Hide debug button in workflow editor - Changed workflow getting route (/my-workflows) - Added access validation for workflows - Removed GoToWorkflow button - Layout fixes: fixed top panel and bottom panel with minicart when resizing in editor, fixed open flow icon change panel - Changed display when icon fails to load or link is incorrect Release 1.2.20 Features: - Modal window with info instead of editor for public workflows - Added buttons in googleDrive blocks Fixes: - Generation of exact path to open the editor of worklfow - Different dropdown due to different permissions of the workflow Release 1.2.19 Features: - Autocomplete fixed and enhanced Fixes: - Documentation links added for Storage/Logs/Packages/Schedule - Fixed buttons on the Storage page - Dark theme improvements - Fixed tab for EditGoogleSheetsDrive - Fixed logo in the sidebar Release 1.2.18 Features: - Changed autocomplete component Release 1.2.17 Fixes: - Creating Google Drive Sheets table in "Params" page - Authorization fixes - Adding "Share" in workflow editor Release 1.2.16 Fixes: - Design - Binding values for checkbox - Resetting values when changing parameter type - Removed default value for the googleDriveSheets type - Displaying errors in the Params modal. Displaying GDrive integration error if it's missing - Bug with canceling a running flow, cancels all instead of just one Release 1.2.15 - Loader for the workflow block when Enable/Disable/Uninstall - Changes to Google Drive Sheets: - Restored the ability to manually specify a spreadsheet in Google Drive Sheets - New parameter type and displaying it in the Params modal, using params variable in the Google Drive Sheets block - Validation for the block, displaying block errors - Ability to choose ChatGPT4 - Captcha block to solve webpage captchas Release 1.2.14 - Fixed problem with authorization, login and event from GoLess site - Display running workflows in popup - Added loader on Install/uninstall workflow, errors on fast switching Release 1.2.13 Features: - Google Drive Sheets API changed to GoLess backend API - Renaming by clicking on the workflow label - Displaying role in read-only mode in workflow Fixes: - Fixed extension authorization reset when closing the browser Release 1.2.11 Features: - Workflow sharing - Restored functionality of GDrive Sheets block - Added ability to create spreadsheets and sheets in GDrive Sheets block Fixes: - Fixes in the 'Parameters' modal, responsible for adding parameters in the trigger Release 1.2.10 Features: - Install/uninstall public workflows - Popup changes - Sentry - Output of shared workflows Fixes: - Removed logic for minimize dashboard window - Switch tabs between Marketplace/My Workflow Release 1.2.8 Fixes: - Fixed log message for GoLess API - Added "Duplicate" button on editor workflow - Refactoring Features: - Showing Notify component after finish workflow - Showing Loader component with blocks process - Loader and notification changes - Design changes (Package/Logs/Popup/Newpage pages) - Don't execute public workflows Release 1.2.7 Fixes: - "popup" is now set as the default option. - Removed the "/welcome" route. - "maximized" dashboard now opens from the popup, changed size. - Fixed the link string for the "Publish" workflow. - Refactoring, eslint changes. - Made changes to the popup: - Added separate state for the popup. - Workflow can now be accessed without details. - Implemented tabbed loading for workflows instead of loading all at once. - Made changes to the loader. Features: - Added a 'permissions:allow' message for the GoLess site. - Opening the "welcome" page of the GoLess site on extension startup. Release 1.2.6 Fixes: - Deleted unnecessary routes. - Changed tab names (title). - Made changes to "packages" page (locales, "empty" block). - Renamed "Input (JSON)" to "Textarea (string)". - Updated colors in blocks. - Removed Prettier, ESLint changes. - Adjusted the color of the 'empty' block for the dark theme. - Added one checking for handlerChatGpt. - Fixed elements removing (Loader, Notifier). Features: - Added output of workflow status (Private/Public/Published). - Implemented sending logs to the API. - Modified the 'welcome' page, which now shows up after installation. - Made changes to the Notifier. Release 1.2.5 - Ability to specify blocks that are undocumented - Corrected some documentation references - fixed modal Logs window to page - Stop operation for workflow in popup window - Changes with design, displaying information that there is no workflow - Fixed bug with trigger: null, also trigger is populated when created - Error handling in site messages, open:page event Release 1.2.4 - Added ability to launch with query parameters - Fixed popup notification that you have to login or register - Fixed locale i18n error in the popup - Fixed search in the popup - Added ability to add notifications to the page and a lowader for ChatGPT - Logs in the popup (last activity), pagination for flow Release 1.2.3 - Added template selection when creating a new workflow - Fixed bugs: - Error when executing the GoogleSheets block (block not executing, "response.json()" error) - Incorrect execution of Update/Append for the GoogleSheets block - Bug when running a public workflow with parameters. Parameters didn't have input fields. Release 1.2.2 - Added ChatGPT block. Version 1.2.0 - Engine update - Fixed documentation links - Localisation fixes - Auth bug fix when closing goless website window - Fixed workflow tab updates, faster loading without timeout like in Automate - "Testing mode" button for debugging is currently inactive - Added a route for automatic flow start on transition - Ability to open read-only and private flows - Google Sheets block added Release 1.1.3 - Added website authorization (login/logout/update) - Fixed a bug with launching flow in popup - UI/UX improvementsRemoved new flow creation button panel in the "Marketplace" tab - Fixed the display of the running flow icon next to "Logs" - Added display of running flows under the extension icon.

User reviews

Extension files

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.

URLs
473
IPv4
241

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

No URLs found
No IP addresses found

1112 indicators in this extension

1112 indicators
0 versions analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe
Version
Size
Verdict
Findings
Permhash
1.2.27
Latest
12.03 MBNot scanned—
7d7674eb651c36c9ffce6a4300519e23903892816ee6a777d5082e8d2fe29fa9
1.2.26
12.03 MBNot scanned—
7d7674eb651c36c9ffce6a4300519e23903892816ee6a777d5082e8d2fe29fa9
1.2.25
12.01 MBNot scanned—
7d7674eb651c36c9ffce6a4300519e23903892816ee6a777d5082e8d2fe29fa9
1.2.24
12.01 MBNot scanned—
7d7674eb651c36c9ffce6a4300519e23903892816ee6a777d5082e8d2fe29fa9
1.2.23
12.01 MBNot scanned—
7d7674eb651c36c9ffce6a4300519e23903892816ee6a777d5082e8d2fe29fa9
1.2.22
12.60 MBNot scanned—
7d7674eb651c36c9ffce6a4300519e23903892816ee6a777d5082e8d2fe29fa9
1.2.21
12.60 MBNot scanned—
7d7674eb651c36c9ffce6a4300519e23903892816ee6a777d5082e8d2fe29fa9
1.2.20
12.60 MBNot scanned—
7d7674eb651c36c9ffce6a4300519e23903892816ee6a777d5082e8d2fe29fa9
1.2.19
12.46 MBNot scanned—
7d7674eb651c36c9ffce6a4300519e23903892816ee6a777d5082e8d2fe29fa9
1.2.18
12.45 MBNot scanned—
7d7674eb651c36c9ffce6a4300519e23903892816ee6a777d5082e8d2fe29fa9
Showing 1 to 10 of 40 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

Gain full insight into all external connections.

Upgrade for full visibility.

Popular in Workflow & Planning

Store rankings

Where this extension appears in store category, collection and keyword rankings.