Chrome Web StoreCaution required
Suspicious in code review
Our reviewer found behaviour consistent with malware, but not enough to confirm it. Treat this extension as untrusted until it has been re-reviewed.
2 high-severity findings in this extension’s code
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
What our analysis found
Grok 4, used by 10,000 people, is rated caution by Extension Auditor. Our code review reported 4 findings (2 high, 2 medium), led by data exfiltration. It comes from a trusted publisher and was last updated in December 2025.
Key findings
- High
Data Exfiltration
A postMessage of type `pageContentRequest` from the remote page [domain withheld] (origin-checked at line 1115, but the trusted origin IS the third party) causes the extension to request <all_urls> and `scripting`, scrape the active tab, and hand the result straight back to that remote origin. The trigger lives entirely on a server outside Chrome Web Store review, and after the first grant `chrome.permissions.contains` returns true so no further prompt is shown. The listing declares no data collection, and [domain withheld] is not the publisher's stated domain ([domain withheld]), so this channel is undisclosed third-party collection.
- High
Unauthorized Data Collection
The injected function clones document.body, strips chrome, and concatenates every remaining text node into `pageText`, returned together with the full URL and title. On any authenticated page (webmail, banking, internal tooling, CRM) this captures the complete rendered content, which is then relayed to [domain withheld]. No destination, retention, or scope is disclosed in the CWS listing (`none declared`) or in the Notion privacy policy, which is still titled for the 'Grok 3 Extension'.
- Medium
Privilege Escalation
The remote page can read or write any key in the extension's chrome.storage.local with no key allowlist or value validation; the only check is that are non-empty. Combined with the fact that the extension's whole UI is server-controlled, this gives [domain withheld] persistent, reviewable-code-free state inside the extension and read access to anything the extension ever stores there.
- Medium
Other
The shipped bundle is a single reskinnable template covering seven competing AI brands, with the 'grok-4' product pointing at a grok-3 host. The CWS listing markets this as an 'x ai product' and the privacy policy is titled 'Privacy Policy of Grok-3 Extension', yet nothing in the code is affiliated with xAI; users are being funnelled to an unaffiliated third-party chat backend under borrowed branding, which is what makes the undisclosed page-content channel above materially misleading rather than merely undocumented.
Analyst notes
The extension is a thin shell whose entire UI is a remote iframe from [domain withheld] (:30-33, 56-62); that remote origin is granted a message bridge that can (a) escalate to <all_urls>+scripting on demand (iframe-service:154-188), (b) harvest the full visible text, title and URL of whatever tab is active via a static executeScript extractor (:95-162) and post it back to [domain withheld] (iframe-service:1264-1270), and (c) read/write arbitrary chrome.storage.local keys (iframe-service:1278-1317). The CWS listing declares no data collection at all, and [domain withheld] is neither the stated author domain ([domain withheld]) nor the publisher 'website' (a Google help link), so the page-text channel fails disclosure check 7e(ii)/(i); the same bundle is a seven-brand template (chatgpt-5, gemini-2, deepseek-ai, perplexity-ai...) with 'grok-4' silently mapped to a grok-3 host, i.e. generic wrapper infrastructure dressed as an official xAI product. Corroborating: our ML score, the 5% malware rate in the permhash cluster, and the Obsidian IoC; contradicting: chrome-stats impact and the Google badges. I stop short of malicious because nothing in the shipped bundle steals credentials, obfuscates, or exfiltrates covertly - the abusable logic lives on a server outside CWS review, and the permission escalation does surface a Chrome consent prompt the first time.
Grok 4 Chrome extension security report
ID: aoemlgniakbojcecmjefonjkgnceklpg
Supported Languages
Extension Info & Metadata
Publisher Contextual Analysis
- Author
- groksidebar.xyz
- Privacy
- Privacy Policy
- MX records exist
- Yes
- Domain exists
- Yes
- Is disposable
- No
- Is role-based
- No
- Mailbox exists
- Yes
- Website
- Visit
You reached today's free scan limit (3/3 unique extensions).
Upgrade for full visibility.
Screenshots & videos
Install growth
- 2 high
- 2 medium
The file, code excerpt and explanation behind each finding are part of the full report. No conclusion has been withheld — only the evidence. The verdict above already reflects everything found here.
2 high-severity findings in this extension’s code
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
About this extension
Use Grok 4 ai to optimize your routine tasks. Try x ai latest model grok 4.0 to experience the greatest LLM tool on market.
Read the publisher’s full description
🚀 The new Grok 4, offers a next-level approach to accomplishing all types of tasks. Thats the reason you have to choose this x ai product, whether you are developer, copywriter, manager or just want to explore possibilities of grok ai. ⚡ Some things that grock do perfectly: 💎 Fast research: Ask for anything and get detailed response with explanation on complex subjects. 💎 Generating Content: As soon as grok-4 is a twitter ai, it’s works with content better than any other solution. 💎 Coding assistance: delegate writing tests, debugging config and code errors or even ask for best practices. 🧩 How to use grok 4 in browser? 1️⃣ Install grock extension. 2️⃣ Press on the icon in the top right corner. 3️⃣ Write, explore, investigate, do research with grok-4. 🌟 Wondering what is grok and what the capabilities of this new Elon Musk AI are? No worries, Grok 5 will help you cover various kinds of requests. Let it give you a taste of using a modern solution to simplify your life. ⚡ Elevate Your Productivity with Grok 4 ai: ➤ Rapid Results: Delegate data parsing to the twitter ai and work more efficiently. ➤ Evolving Intelligence: It learns and adapts over time, tailoring its responses to match your unique style. ➤ Seamless Integration: Enjoy the power of gronk ai across all pages in browser. ➤ Streamlined Oversight: Manage conversation logs and code suggestions in a single, unified platform. 🔒 Security & Privacy matters. • Your Trust is our Goal: Grok Chatbot is designed with your security in mind. • Confidential Chats: Enjoy robust end-to-end encryption that keeps your conversations private. • Data Integrity: We never share or sell your information to third parties. Use Grok 4 confidently. • Complete Control: Opt for local storage to maintain full control over your history. 🚨 Transform Your Chrome Experience—Don’t Just Browse! 🌍 This Elon Musk AI isn’t simply another tool—it’s a productivity game-changer and aligns with its creator lifestyle. With its speed, smart design, and user-centric approach, this extension is essential for anyone looking to: ⚡ Save Precious Time: Streamline research and tasks, cutting hours off your workload with x ai. ⚡ Seamless Integration: Access powerful groc ai capabilities without ever leaving your browser. ⚡ Organized & Secure: Keep all your interactions neatly organized and fully protected with grok4. 🌐 Grok Chatbot for Routine Workload: ▸ Ask about daily issues such as creating grocery lists or helping to choose gifts. ▸ In Chrome solution helps to avoid distractions and switching windows. 🚀 Touch the Future with Grok 4 ai As technology evolves, ensure your workflow remains cutting-edge. By embracing this tool, you’re positioning yourself for success in an era driven by innovation. Let Grock AI manage your coding challenges, while Grok Chatbot streamlines your daily inquiries. 🌍 Our Extension is Universal Solution Gork AI works seamlessly across all your devices: ✅ Chrome Across the Board: Compatible with Windows, macOS, Linux, and Chromebooks. 💼 Use for professional and personal purposes. This extension tackles a wide range of tasks—from answering simple queries to supporting in-depth research. Use the twitter grok to quickly gather facts or dive into comprehensive investigations. At the same time, the X AI can manage code generation and optimization, easing the workload for busy developers. 🎨 Regular Updates and Improvements: Grok 3 stays ahead by continually integrating the latest breakthroughs and delivering incremental performance upgrades. With this extension, you benefit from steady advancements that keep you aligned with current industry standards, resulting in progressively more efficient workflows. ✨ Install Grok 4.0 now to experience modern and powerful twitter ai
User reviews
Extension files
Browse and explore files within this extension package
You reached today's free scan limit (3/3 unique extensions).
Upgrade for full visibility.
URLs
View the external URLs this extension communicates with to understand its network activity and data interactions.
2 high-severity findings in this extension’s code
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
Code Diff
Compare extension code between any two versions.
0 changed files detected
No comparable text files found between these versions.
You reached today's free scan limit (3/3 unique extensions).
Upgrade for full visibility.
Related extensions
Popular in Tools
- Montara Chrome Extension639,000,000 users
- 迅雷下载支持88,000,000 users
- Passlit Openbook10,000,000 users
- Zotero Connector9,000,000 users
- Browsec VPN - Free VPN for Chrome8,000,000 users