Chrome Web Store
16Versions
0Code reviewed

Not reviewed

No code review on record

We have not reviewed this extension’s code, so we cannot vouch for it either way. Check the permissions below to decide whether it asks for more than it needs.

Want us to read this extension's code? Ask for a review and we'll queue it.

27 indicators in this extension

27 indicators
0 versions analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

What our analysis found

HirePilot LinkedIn Assistant is not yet reviewed by Extension Auditor. Its permissions mean it can inject scripts into pages. It comes from a trusted publisher and was last updated in March 2026.

HirePilot LinkedIn Assistant

HirePilot LinkedIn Assistant Chrome extension security report

ID: iiegpolacomfhkfcdgppbgkgkdbfemce

Supported Languages

🇺🇸US English

Extension Info & Metadata

Status
Active
Version
3.0.8
Size
0.32 MB
Rating
0.0/5
Reviews
0
Users
28
Type
Extension
Updated
Mar 30, 2026
Category
Developer tools
Price
Free
Featured
No
Visibility
Listed
Mature
No
By Google
No
Trusted
Yes
This publisherTrack record
1extension
All still listed

Publisher Contextual Analysis

Trusted
Author
Offr Media
MX records exist
Yes
Domain exists
Yes
Is disposable
No
Is role-based
Yes
Mailbox exists
Yes
Extensions
1
Active
1
Obsolete
0
Listed
1
Unlisted
0
Users
28

Screenshots & videos

Screenshot 1
Screenshot 2
Screenshot 3
Screenshot 4
Screenshot 5

Install growth

Item
Type
Severity
Description
scripting
Permission
Critical
This permission allows injection and execution of JavaScript on any webpage. Rated Critical because it can modify page content, steal sensitive data, and inject malicious code into any site the extension has access to.
cookies
Permission
High
This permission provides full access to read and modify browser cookies. Rated High because it can steal session tokens, modify authentication cookies, and compromise accounts across websites.
Contextual Risk Factors
Risk Factor
High
The following context increases the overall risk:• 20% increase: Access to sensitive domains increases potential impact• 25% increase: Unsafe code evaluation capabilities increase attack surface
Unsafe WebAssembly Execution
Risk Factor
High
This extension's CSP allows "wasm-unsafe-eval".
storage
Permission
Medium
This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
activeTab
Permission
Medium
This permission grants temporary access to the current tab. Rated Medium because it can access current page content when invoked, though limited to user-initiated actions.
https://api.thehirepilot.com/*
Host
Medium
Host permission — access limited to this URL pattern.
https://*.linkedin.com/*
Host
Medium
Host permission — access limited to this URL pattern.
https://linkedin.com/*
Host
Medium
Host permission — access limited to this URL pattern.
Access to Sensitive Domains
Risk Factor
Medium
This extension requests access to sensitive domains: https://*.linkedin.com/*, https://linkedin.com/*

27 indicators in this extension

27 indicators
0 versions analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

About this extension

Seamlessly export LinkedIn Sales Navigator leads and authenticate with HirePilot for streamlined recruitment workflows.

Read the publisher’s full description

HirePilot: LinkedIn Lead Capture & Outreach Capture and enrich LinkedIn leads, then sync them to HirePilot—fast, safe, and compliant. 💡 What It Does LinkedIn → HirePilot in one click Capture lead data (name, title, company, location, profile URL) from LinkedIn or Sales Navigator pages you’re viewing. Enrich on demand Use HirePilot credits to find verified work emails and contact details. Email directly from the extension Send personalized outreach using your connected senders: Gmail, Outlook, or SendGrid. Pull from your saved templates. LinkedIn connection messages Prefill your connection note or use the auto-send flow, safely paced and browser-native. Account-aware UX See current credits, enforce plan limits, and respect team-wide settings. 👥 Who It’s For • Recruiters, sourcers, and hiring teams • Sales and BDR teams working inside LinkedIn • Any HirePilot user who wants faster, cleaner lead capture ✨ Key Features • Import from Sales Navigator search pages (up to visible results) • Capture individual LinkedIn profiles with one click • Optional email enrichment (credit-based) • Use message templates (with tokens like {{first_name}}, {{company}}) • Sender fallback logic (SendGrid → Gmail → Outlook) • Real-time credit tracking and gating based on plan • Privacy-safe: only reads pages you open and act on ⚙️ How It Works 1. Sign in to your HirePilot account inside the extension 2. Visit a LinkedIn or Sales Navigator profile or search page 3. Click the extension icon to review, enrich (optional), and import 4. Send outreach via email or LinkedIn connection message 🔒 Privacy & Security • Uses your existing LinkedIn session (no password or login sharing) • Only accesses the page you’re actively viewing • Data is sent only to your HirePilot account • No ads, no data resale, no tracking — single-purpose only 🛠 Permissions (and Why They’re Needed) • activeTab: To read LinkedIn content only when you click the extension • cookies: To use your active LinkedIn session • storage: To store your HirePilot auth token and settings • Host access: • linkedin.com: Read lead data you’re authorized to view • api.thehirepilot.com: Sync leads, trigger enrichment, load templates/senders ✅ Requirements • A HirePilot account • A LinkedIn account (Sales Navigator recommended) 🆕 What’s New in This Version • ⚡ Instant parsing of individual profiles using JSON-LD • 🔁 More reliable enrichment with retry/polling flow • 📨 Real message templates (subject + body) with personalization tokens • 📤 LinkedIn connection auto-send support (browser-based, safe pacing) • 📊 Credit display, sender selection, and status indicators improved •. Auto-connect via hirepilot_connect=1; adaptive waits; improved selectors; in-app trigger support. 🚀 Why Install This Extension • Eliminate manual copy/paste from LinkedIn • Keep lead data clean, enriched, and centralized in HirePilot • Go from viewing to outreach in seconds • Works seamlessly with your existing HirePilot campaigns 🧭 Category Suggestion Productivity (recommended) Also acceptable: Developer Tools Tip: “Productivity” typically ranks better in Chrome Web Store reviews for recruiter/sales tools. 🛟 Support & Policies • Help Center: https://thehirepilot.com/support • Privacy Policy: https://thehirepilot.com/chromeextension/privacy

User reviews

Extension files

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.

URLs
25
IPv4
1

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

No URLs found
No IP addresses found

27 indicators in this extension

27 indicators
0 versions analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe
Version
Size
Verdict
Findings
Permhash
3.0.2
Latest
0.33 MBNot scanned—
27079e56acd94dd77404148b87d39b84393c568b7383ee06b90c301591224ba1
3.0.7
0.33 MBNot scanned—
27079e56acd94dd77404148b87d39b84393c568b7383ee06b90c301591224ba1
3.0.8
0.32 MBNot scanned—
27079e56acd94dd77404148b87d39b84393c568b7383ee06b90c301591224ba1
3.0.6
0.33 MBNot scanned—
27079e56acd94dd77404148b87d39b84393c568b7383ee06b90c301591224ba1
3.0.5
0.33 MBNot scanned—
27079e56acd94dd77404148b87d39b84393c568b7383ee06b90c301591224ba1
3.0.4
0.32 MBNot scanned—
27079e56acd94dd77404148b87d39b84393c568b7383ee06b90c301591224ba1
3.0.3
0.33 MBNot scanned—
27079e56acd94dd77404148b87d39b84393c568b7383ee06b90c301591224ba1
3.0.1
1.50 MBNot scanned—
27079e56acd94dd77404148b87d39b84393c568b7383ee06b90c301591224ba1
2.2.6
1.49 MBNot scanned—
27079e56acd94dd77404148b87d39b84393c568b7383ee06b90c301591224ba1
2.2.5
0.30 MBNot scanned—
27079e56acd94dd77404148b87d39b84393c568b7383ee06b90c301591224ba1
Showing 1 to 10 of 20 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

Gain full insight into all external connections.

Upgrade for full visibility.