What our analysis found

Google Keep Chrome Extension, used by 8,000,000 people, showed no malicious code in Extension Auditor's review. It comes from a trusted publisher and was last updated in October 2026.

The extension is an official Google Keep note-taking tool. All outbound network requests go to first-party Google domains (, for logging,, etc.) which align with the publisher's privacy policy and disclosed data-collection categories (personal info, auth, user activity, website content). Broad host permissions and scripting are necessary for saving content from any page. The code is minified but not obfuscated; it uses standard patterns (XMLHttpRequest, innerHTML, appendChild) for injecting an iframe and communicating with the Keep web app. No evidence of unauthorized data exfiltration or malicious behavior was found. The ML model and third-party risk score over-weighted permission breadth and code-pattern counts typical of a feature-rich extension.