Chrome Web Store

104Versions

1Code reviewed

No malware found

In code review (v2.0.0.5646)

Our reviewer read version 2.0.0.5646 — the most recent version we have reviewed — and found no malicious behaviour. The version shown here has not been individually reviewed yet.

71 indicators in this extension

71 indicators

1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99 Start 7-day trial — all reports

One-time payment · Secure checkout by Stripe

What our analysis found

iorad — the tutorial builder, used by 50,000 people, showed no malicious code in Extension Auditor's review. Its permissions mean it can read and change data on all websites, can inject scripts into pages and can observe network requests. It comes from a trusted publisher and was last updated in September 2026.

Analyst notes

The extension is a legitimate tutorial builder. The dangerous permissions (webRequest, scripting, cookies, etc.) are essential for capturing user interactions and injecting tutorial overlays on any website. The declarativeNetRequest rule only adds a version-identifying header to the publisher's own domains. No unauthorized data exfiltration or malicious behavior was found. The ML model likely overfit on the broad permission set without considering the functional context.

iorad — the tutorial builder Chrome extension security report

ID: kjfmedbganalpkohkeghhpppicoigdal

Supported Languages

🇺🇸English

Extension Info & Metadata

Status

Active

Version

2.0.0.5731

Size

1.16 MB

Rating

4.7/5

Reviews

315

Users

50,000

Type

Extension

Updated

Sep 6, 2026

Publisher Contextual Analysis

Trusted

Author: iorad
Privacy: Privacy Policy
Help: Help Center
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes

Extensions

Active

Obsolete

Listed

Unlisted

Users

50,000

Screenshots & videos

Install growth

User Growth

Showing data from Sep 10, 2023 to Sep 08, 2024

Versions

+50%(+20,000 users)

Compared to 3 months ago

18 versions released in this period

Rating Count

Total: 320 ratings

Average Rating

Current: 4.77 / 5.0-0.01

See plans

React Flow

Internal permhash`e0b296b26c…`
No malicious matches

1 other extension carries this fingerprint, none of them known malicious.

Withheldnot flagged

Permhash (Mandiant)`c818687427…`
No malicious matches

1 other extension carries this fingerprint, none of them known malicious.

Withheldnot flagged

Network indicators

70 URLs and 1 IP literals were extracted from this version.

Item	Type	Severity	Description
webRequest	Permission	Critical	This permission enables the extension to monitor and analyze all web requests made by the browser. Rated Critical because it can observe all network traffic including sensitive data, track browsing behavior, and gather authentication tokens.
declarativeNetRequestWithHostAccess	Permission	Critical	This permission combines network request modification with host permissions. Rated Critical because it can modify requests for specific domains, potentially targeting sensitive websites with precise attack rules.
scripting	Permission	Critical	This permission allows injection and execution of JavaScript on any webpage. Rated Critical because it can modify page content, steal sensitive data, and inject malicious code into any site the extension has access to.
<all_urls>	Host	Critical	Broad host access — the extension can read/modify content on every website.
Dangerous Permission Combination: scripting,<all_urls>,webRequest	Risk Factor	Critical	Enables sophisticated data theft through script injection and traffic monitoring
Dangerous Permission Combination: scripting,<all_urls>,cookies	Risk Factor	Critical	Enables sophisticated data theft through script injection and traffic monitoring
nativeMessaging	Permission	High	This permission enables communication with applications installed on your computer. Rated High because it can exchange data with native programs, potentially exposing system-level information and local files.
webNavigation	Permission	High	This permission enables monitoring of all browser navigation events and transitions. Rated High because it can track every page visit, navigation method, and browsing pattern, potentially exposing sensitive browsing behavior and user activities.
cookies	Permission	High	This permission provides full access to read and modify browser cookies. Rated High because it can steal session tokens, modify authentication cookies, and compromise accounts across websites.
offscreen	Permission	High	This permission creates hidden browser documents with full DOM access. Rated High because it can run background operations invisibly, potentially executing malicious code without user awareness.
Dangerous Permission Combination: scripting,cookies,webRequest	Risk Factor	High	Enables extensions to interact with scripts, modify files and downloads, and alter browsing history and bookmarks, potentially affecting data integrity and user control.
Contextual Risk Factors	Risk Factor	High	The following context increases the overall risk:• 10% increase: Early script execution enables pre-emptive content manipulation• 10% increase: About:blank access enables potential sandbox escape vectors
Broad Host Permissions	Risk Factor	High	This extension has broad host permissions allowing it to access many or all websites.
Broad Content Script Access	Risk Factor	High	This extension can inject scripts into any website.
storage	Permission	Medium	This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
tabs	Permission	Medium	This permission enables tab management and monitoring. Rated Medium because it can track open tabs, access tab metadata, and monitor user browsing patterns.
unlimitedStorage	Permission	Medium	This permission removes storage quota restrictions. Rated Medium because it can store large amounts of user data without limits, potentially impacting browser performance and storing extensive tracking data.
Early Content Script Execution	Risk Factor	Medium	This extension runs content scripts at document_start.
About:blank Access	Risk Factor	Medium	This extension can run content scripts in about:blank pages.
contextMenus	Permission	Low	This permission adds items to browser context menus. Rated Medium because it only modifies right-click menus without access to page content.
sidePanel	Permission	Low	This permission adds custom panels to the browser interface. Rated Low because it only affects browser UI elements and cannot access page content.

71 indicators in this extension

71 indicators

1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99 Start 7-day trial — all reports

One-time payment · Secure checkout by Stripe

About this extension

Tutorial creation made easy. Instantly make guided, step-by-step directions for any website. Directly in the browser.

Read the publisher’s full description

Create guided, step-by-step tutorials directly in your browser with iorad. This easy-to-use extension automatically captures your interactions with any website and generates shareable tutorials—no video editing or manual labeling required. Key Features: Automatically capture and identify user actions on websites. Generate step-by-step tutorials in minutes. Publish instantly to platforms like Zendesk, Salesforce, Slack, and more. Save time and streamline documentation processes. iorad is built with user privacy in mind and adheres to GDPR standards. Learn more at https://www.iorad.com/privacypolicy. Simplify your documentation process—try iorad today!

User reviews

3.9 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

When it works, it's ok for a couple of things it does. The interactive element is great, and the AI voiceovers are excellent. However, the overall functionality is extremely limited and it's very glitchy. Actions fail at least half the time, and often it fails while saving new steps - causing you to lose all of them and redo the process again and again. You can't edit or add to the images it creates - you can only mask to hide a section of it. Impossible to add arrows, circles, highlights or anything. You can't upload your own screenshots or images - you are completely limited to the uneditable images it makes! Always use desktop to record - don't ever use the web recording as you can't add desktop recordings to a web recording. Sizing for every screenshot is a major pain point because it doesn't resize anything to fit the frame. File organization and change management are clunky but they work. Also, I strongly recommend only allowing the addon to run when you click on it. Otherwise, it will constantly interrupt your non-iorad work to tell you "An outdated instance of iorad is running. Reload the tab.". Also, the "help" and support are practically non-existant - all you'll find are some demos that customers created to walk you through basic actions - nothing for advanced functions, troubleshooting, or handling problems or errors.

Me Myself·23 Oct 2025

It's 4.5 star-rating. I really love the extension. I have used already for the past four years in my field of job as a Trainer. Prior to this feature I had used the snipping tool which was a time consuming tool. I like iorad which has saved me a lot of time. Very accessible to share with others. I really like that it comes with different language preferences for my Spanish audience. I have in few times used the voice audio to do the training for those who are better at listening than reading instructions. I use a lot the blurred functionality to cover sensitive information. The only suggestion I would give to the creator of this extension is to have the ability to add more than one pink outline on the screenshots, overall, very excellent extension.

Extension files

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.

URLs

IPv4

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

No URLs found

No IP addresses found

71 indicators in this extension

71 indicators

1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99 Start 7-day trial — all reports

One-time payment · Secure checkout by Stripe

Version	Size	Verdict	Findings	Permhash
2.0.0.5731 Latest	1.16 MB	Not scanned	—	c81868742758c21c99e97fa961481b5d3849bd3f391655dec82b70bc1a833ebc
2.0.0.5666	1.14 MB	Not scanned	—	c81868742758c21c99e97fa961481b5d3849bd3f391655dec82b70bc1a833ebc
2.0.0.5664	1.14 MB	Not scanned	—	c81868742758c21c99e97fa961481b5d3849bd3f391655dec82b70bc1a833ebc
2.0.0.5646	1.14 MB	No malware found	0	c81868742758c21c99e97fa961481b5d3849bd3f391655dec82b70bc1a833ebc
2.0.0.5644	1.14 MB	Not scanned	—	c81868742758c21c99e97fa961481b5d3849bd3f391655dec82b70bc1a833ebc
2.0.0.5643	1.14 MB	Not scanned	—	c81868742758c21c99e97fa961481b5d3849bd3f391655dec82b70bc1a833ebc
2.0.0.5638	1.14 MB	Not scanned	—	c81868742758c21c99e97fa961481b5d3849bd3f391655dec82b70bc1a833ebc
2.0.0.5619	1.14 MB	Not scanned	—	c81868742758c21c99e97fa961481b5d3849bd3f391655dec82b70bc1a833ebc
2.0.0.5612	1.15 MB	Not scanned	—	c81868742758c21c99e97fa961481b5d3849bd3f391655dec82b70bc1a833ebc
2.0.0.5566	1.16 MB	Not scanned	—	c81868742758c21c99e97fa961481b5d3849bd3f391655dec82b70bc1a833ebc

Showing 1 to 10 of 110 rows

Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

Gain full insight into all external connections.

Upgrade for full visibility.

Popular in Workflow & Planning

Adobe Acrobat: PDF edit, convert, sign tools346,000,000 users
Application Launcher For Drive (by Google)99,000,000 users
AdBlock — block ads across the web65,000,000 users
Chrome Remote Desktop41,000,000 users
Adblock Plus - free ad blocker40,000,000 users

No malware found

71 indicators in this extension

What our analysis found