Chrome Web Store
94Versions
4Code reviewed

No malware found

In code review

Our reviewer read this extension’s code and found no malicious behaviour. Review the permissions below before installing.

83 indicators in this extension

83 indicators
4 versions analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

What our analysis found

Knowee AI (formerly StudyGPT) - Your Homework & Essay Helper, used by 30,000 people, showed no malicious code in Extension Auditor's review. Its permissions mean it can read and change data on all websites and can inject scripts into pages. It comes from a trusted publisher and was last updated in April 2026.

Analyst notes

Every network destination in the provided code is first-party::1245 sets the single API base to `[domain withheld] and that is the only call anywhere in the bundle, while chrome.cookies access at:962, 973, 983 and 1557 is hardcoded to `url: "[domain withheld]"` and reads only the extension's own `_sg_auth_token`/`promotionCode` — there is no path to read cookies for an arbitrary host despite the `cookies` + `<all_urls>` + `scripting` combination the risk engine and chrome-stats both scored on. The `document_start` all-URLs content script that produced the 'early execution' flag (content-.js:920-940) is inert except on `[domain withheld]`, where it appends a bundled local file, and the `tabs.onUpdated` handler (:1785-1818) sends only fixed event IDs to ` `, never tab URLs; per-site toggles stay in `chrome.storage.local` (:1326-1395). Contradicting the ML signal: the bundled manifest matches the published CWS manifest exactly, the publisher holds Google's trusted-publisher badge with a featured listing, and the malext-feed row is self-described as 'not an independent code review'; the permhash cluster's '100% malware' is 2 versions including this one, so it is not independent evidence. Confidence is medium rather than high only because the bundle is incomplete — the manifest declares ` `, ` `, ` `, ` `, ` ` and the ` ` injected at:1841, none of which were supplied, and those are the scripts that run on every page.

Knowee AI (formerly StudyGPT) - Your Homework & Essay Helper

Knowee AI (formerly StudyGPT) - Your Homework & Essay Helper Chrome extension security report

ID: fcejkolobdcfbhhakbhajcflakmnhaff

Extension Info & Metadata

Status
Active
Version
4.2.1
Size
7.43 MB
Rating
4.5/5
Reviews
1,100
Users
30,000
Type
Extension
Updated
Apr 23, 2026
Category
Workflow & planning
Price
Paid
Featured
Yes
Visibility
Listed
Mature
No
By Google
No
Trusted
Yes
This publisherTrack record
1extension
All still listed
Scanned by Extension Auditor — Low RiskDevelopers: embed this badge to link to this report.

Publisher Contextual Analysis

Trusted
Author
knowee.ai
MX records exist
Yes
Domain exists
Yes
Is disposable
No
Is role-based
No
Mailbox exists
Yes
Website
Visit
Extensions
1
Active
1
Obsolete
0
Listed
1
Unlisted
0
Users
30,000

Email Change History

1 change
Apr 9, 2025

Screenshots & videos

Screenshot 2
Screenshot 3
Screenshot 4
Screenshot 5
Screenshot 6

Install growth

Item
Type
Severity
Description
scripting
Permission
Critical
This permission allows injection and execution of JavaScript on any webpage. Rated Critical because it can modify page content, steal sensitive data, and inject malicious code into any site the extension has access to.
<all_urls>
Permission
Critical
This permission grants access to all websites without restriction. Rated High because it can access any web content, monitor all web activity, and potentially steal sensitive data across all sites.
http://*/*
Host
Critical
Broad host access — the extension can read/modify content on every website.
https://*/*
Host
Critical
Broad host access — the extension can read/modify content on every website.
<all_urls>
Host
Critical
Broad host access — the extension can read/modify content on every website.
Dangerous Permission Combination: scripting,<all_urls>,cookies
Risk Factor
Critical
Enables sophisticated data theft through script injection and traffic monitoring
cookies
Permission
High
This permission provides full access to read and modify browser cookies. Rated High because it can steal session tokens, modify authentication cookies, and compromise accounts across websites.
Contextual Risk Factors
Risk Factor
High
The following context increases the overall risk:• 10% increase: Early script execution enables pre-emptive content manipulation
Broad Host Permissions
Risk Factor
High
This extension has broad host permissions allowing it to access many or all websites.
Broad Content Script Access
Risk Factor
High
This extension can inject scripts into any website.
tabs
Permission
Medium
This permission enables tab management and monitoring. Rated Medium because it can track open tabs, access tab metadata, and monitor user browsing patterns.
storage
Permission
Medium
This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
activeTab
Permission
Medium
This permission grants temporary access to the current tab. Rated Medium because it can access current page content when invoked, though limited to user-initiated actions.
file://*
Host
Medium
Host permission — access limited to this URL pattern.
Early Content Script Execution
Risk Factor
Medium
This extension runs content scripts at document_start.
file://*
Permission
Unknown
No classification available for this permission.

Each row lists a threat category the scanner evaluates. A checkmark means the review ran and found no matching issues in that category for this version.

  • Data Exfiltration

    Code review completed; no malicious patterns detected for this category.

  • Unauthorized Data Collection

    Code review completed; no malicious patterns detected for this category.

  • Network Interception

    Code review completed; no malicious patterns detected for this category.

  • Code Injection

    Code review completed; no malicious patterns detected for this category.

  • Credential Theft

    Code review completed; no malicious patterns detected for this category.

  • Obfuscation

    Code review completed; no malicious patterns detected for this category.

  • Tracking

    Code review completed; no malicious patterns detected for this category.

  • Privilege Escalation

    Code review completed; no malicious patterns detected for this category.

  • Phishing

    Code review completed; no malicious patterns detected for this category.

  • Remote Code Loading

    Code review completed; no malicious patterns detected for this category.

  • Other

    Code review completed; no malicious patterns detected for this category.

83 indicators in this extension

83 indicators
4 versions analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

About this extension

💡Knowee- 你的私人AI学习助手!

Read the publisher’s full description

StudyGPT helps - explaining academic concepts, - answering academic questions, - generating exercises based on course materials, - creating writing guidance, - recommending references based on paper topics, and what your everyday use: - writing, text polishing, summarizing, translating, and replying to emails (especially to your professor!). 🏆StudyGPT is a beloved personal study assistant (Chrome sidebar) among students. (You don't wanna miss it!) 🎉 You can use StudyGPT on any webpage, which is more convenient than standalone sites like ChatGPT and Claude, and it's 【completely free】, without needing an OpenAI account. 👉 Main features: ① Answering general and academic questions ② Generating exercises based on learning materials ③ Creating writing guides with recommended references based on paper topics ④ Summarizing the contents of YouTube videos ⑤ Performing a variety of text-related tasks such as rewriting, summarizing, correcting grammar, etc. ⑥ Connect StudyGPT to the internet to always access the latest content online 🚀 Quick start tips: ① Press [Cmd+I] or [Ctrl+I] on any webpage to activate StudyGPT to assist your study and work. ② Select any text on any webpage, and let StudyGPT explain, translate, rewrite, summarize, etc. ③ Use the [Exercise Generation] tool to let StudyGPT generate exercises based on learning materials. ④ Use the [Writing Guide] feature to upload writing task documents and let StudyGPT create a writing guide with recommended reference articles. ⑤ Use the [Chat Document] feature to upload documents and let StudyGPT answer questions based on their content. ⑥ Go to a YouTube video page with subtitles, click the [Watch Video] button in the sidebar, and get the key content of the video. 🎁 StudyGPT is always improving through new features to enhance your learning efficiency and save you more time, so you can achieve better learning outcomes. Please stay tuned for our frequent and exciting updates! 📧 Any questions, suggestions, or feedback? Email us at service@xbuddy.ai ---- FAQ: 1. What is ChatGPT? ChatGPT is a large language model developed by OpenAI. It's based on the GPT (Generative Pre-trained Transformer) architecture and has been trained on a vast amount of text data from the internet. ChatGPT can be used for various natural language processing tasks, such as language translation, text summarization, text generation, and answering questions. It can understand and respond to user input in a conversational manner, making it ideal for chatbot and virtual assistant applications. 2. Who created ChatGPT? ChatGPT was created by OpenAI, a company based in San Francisco. It was launched on November 30, 2022. OpenAI's CEO, Sam Altman, is also referred to as the founder of ChatGPT. 3. How is StudyGPT different from ChatGPT/Claude/NotionAI/Evernote/Bard/New Bing? StudyGPT is an AI intelligent learning assistant tool developed based on the new generation of large language model technology. It has professional features such as answering academic questions, generating exercises, and providing writing guidance. ChatGPT/Claude are software primarily designed for general conversation scenarios, NotionAI/Evernote is software mainly designed for general writing scenarios, Bard and New Bing are AI tools primarily designed for search scenarios. They can only run on their standalone webpages, while StudyGPT can be used on any webpage. 4. Is StudyGPT free? Yes, this extension is free to use. StudyGPT provides 40 free queries to each free user every day. 5. ChatGPT is banned in my country. Can I use StudyGPT in my country? Yes. The StudyGPT Chrome extension can be used in all countries. No VPN is required. 💡 Important Tips 1. After installing the plugin, please refresh the webpage to ensure its normal operation. 2. For security reasons, this extension is not applicable to Chrome store pages and blank pages.

User reviews

Extension files

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.

URLs
58
IPv4
5

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

No URLs found
No IP addresses found

83 indicators in this extension

83 indicators
4 versions analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe
Version
Size
Verdict
Findings
Permhash
4.2.1
Latest
7.43 MBNo malware found0
b318246592867a3ceb798721055bd7824d3234a63744809f1fb8842a38092ca2
4.2.0
7.46 MBNot scanned—
b318246592867a3ceb798721055bd7824d3234a63744809f1fb8842a38092ca2
4.1.0.0
N/ANot scanned—
eee47163b5a8fe701e1eaf2643e7ec956370e6dc5910af0dff65e0fec621834b
4.0.0.0
N/ANot scanned—
eee47163b5a8fe701e1eaf2643e7ec956370e6dc5910af0dff65e0fec621834b
3.6.0.0
N/ANot scanned—
eee47163b5a8fe701e1eaf2643e7ec956370e6dc5910af0dff65e0fec621834b
3.4.0.0
N/ANot scanned—
e9d2df93a75356cb1ff781e9527a2680b49dfda2d1f7ee66eac1e747876d6789
3.3.0.0
N/ANot scanned—
e9d2df93a75356cb1ff781e9527a2680b49dfda2d1f7ee66eac1e747876d6789
3.1.0.0
N/ANot scanned—
e9d2df93a75356cb1ff781e9527a2680b49dfda2d1f7ee66eac1e747876d6789
3.0.0.0
N/ANot scanned—
e9d2df93a75356cb1ff781e9527a2680b49dfda2d1f7ee66eac1e747876d6789
2.5.0.0
N/ANot scanned—
acfd05b16c57904666e3a84c8c643667fc96038fa9ca2287c47c266e1763aba5
Showing 1 to 10 of 100 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

Gain full insight into all external connections.

Upgrade for full visibility.