Edge Add-ons
51Versions
0Code reviewed

Not reviewed

No code review on record

We have not reviewed this extension’s code, so we cannot vouch for it either way. Check the permissions below to decide whether it asks for more than it needs.

Want us to read this extension's code? Ask for a review and we'll queue it.

334 indicators in this extension

334 indicators
0 versions analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

What our analysis found

Magical: Text Expander & Autofill, used by 25,095 people, is not yet reviewed by Extension Auditor. Its permissions mean it can read and change data on all websites and can inject scripts into pages. It was last updated in April 2026.

Magical: Text Expander & Autofill

Magical: Text Expander & Autofill Edge extension security report

ID: mnclkclehoclnklignljjpkkkimlpemi

Supported Languages

🇮🇳Bengali
🇧🇷Brazilian Portuguese
🇬🇧British English
🇨🇳Chinese (Simplified)
🇹🇼Chinese (Traditional)
🇩🇰Danish
🇳🇱Dutch
🇵🇭Filipino
🇫🇮Finnish
🇨🇦French
🇩🇪German
🇮🇳Hindi
🇮🇩Indonesian
🇮🇹Italian
🇯🇵Japanese
🇰🇷Korean
🇳🇴nn-NO
🇷🇺Russian
🇪🇸Spanish
🇸🇪Swedish
🇹🇭Thai
🇺🇸US English
🇻🇳Vietnamese

Extension Info & Metadata

Status
Active
Version
3.119.1
Size
8.23 MB
Rating
3.5/5
Reviews
37
Users
25,095
Type
Extension
Updated
Apr 8, 2026
Category
Productivity
Price
Paid
Featured
Yes
Visibility
Listed
Mature
No
By Google
No
Trusted
No
This publisherTrack record
1extension
All still listed

Publisher Contextual Analysis

Author
HeyAutofill Inc dba Magical
Website
Visit
Extensions
1
Active
1
Obsolete
0
Listed
1
Unlisted
0
Users
25,095

Screenshots & videos

Screenshot 2
Screenshot 3
Screenshot 4
Screenshot 5

Install growth

Item
Type
Severity
Description
scripting
Permission
Critical
This permission allows injection and execution of JavaScript on any webpage. Rated Critical because it can modify page content, steal sensitive data, and inject malicious code into any site the extension has access to.
<all_urls>
Host
Critical
Broad host access — the extension can read/modify content on every website.
file:///*
Risk Factor
Critical
This permission grants access to all websites without restriction. Rated High because it can access any web content, monitor all web activity, and potentially steal sensitive data across all sites.
Dangerous Permission Combination: scripting,<all_urls>,cookies
Risk Factor
Critical
Enables sophisticated data theft through script injection and traffic monitoring
clipboardRead
Permission
High
This permission allows reading clipboard content. Rated High because it can steal copied passwords, sensitive data, and monitor all content copied to clipboard.
cookies
Permission
High
This permission provides full access to read and modify browser cookies. Rated High because it can steal session tokens, modify authentication cookies, and compromise accounts across websites.
offscreen
Permission
High
This permission creates hidden browser documents with full DOM access. Rated High because it can run background operations invisibly, potentially executing malicious code without user awareness.
webNavigation
Permission
High
This permission enables monitoring of all browser navigation events and transitions. Rated High because it can track every page visit, navigation method, and browsing pattern, potentially exposing sensitive browsing behavior and user activities.
Contextual Risk Factors
Risk Factor
High
The following context increases the overall risk:• 20% increase: Access to sensitive domains increases potential impact
Broad Host Permissions
Risk Factor
High
This extension has broad host permissions allowing it to access many or all websites.
Broad Content Script Access
Risk Factor
High
This extension can inject scripts into any website.
storage
Permission
Medium
This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
tabs
Permission
Medium
This permission enables tab management and monitoring. Rated Medium because it can track open tabs, access tab metadata, and monitor user browsing patterns.
unlimitedStorage
Permission
Medium
This permission removes storage quota restrictions. Rated Medium because it can store large amounts of user data without limits, potentially impacting browser performance and storing extensive tracking data.
Access to Sensitive Domains
Risk Factor
Medium
This extension requests access to sensitive domains: https://docs.google.com/spreadsheets/*
alarms
Permission
Low
This permission schedules periodic tasks. Rated Low because it can only trigger events at specified times without access to sensitive data.
contextMenus
Permission
Low
This permission adds items to browser context menus. Rated Medium because it only modifies right-click menus without access to page content.
notifications
Permission
Low
This permission displays system notifications. Rated Low because it can only show user-visible notifications without accessing system data.
search
Permission
Low
This permission accesses search functionality. Rated Low because it only interacts with the browser's search feature without accessing search history.
windows
Permission
Unknown
No classification available for this permission.

334 indicators in this extension

334 indicators
0 versions analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

About this extension

Magical is a text expander and autofill automation app used by over 100K companies. Expand text like magic and auto-fill forms.

Read the publisher’s full description

Magical is a text expander and autofill automation app used by over 100K companies. Expand your text like magic and auto-fill forms, spreadsheets, and messages. 🪄Join 950,000 users at 100,000+ companies automating 7+ hours of repetitive work weekly! What can Magical automate? ✍️ Automate writing & messaging: Use Magical’s text expander to autofill messages with your contact’s personal information. 🔢 Automate any data entry task: With a single click, autofill contacts, leads, patient details, or job candidates into any database, form, or spreadsheet. Why Magical? 📍**Works where you do**: Boost your productivity on 10,000,000+ apps where you already work, like Salesforce, Zendesk, Gmail, LinkedIn, Greenhouse, or any other website. ⏱ **Set up in seconds:** Magical doesn't rely on integrations, APIs, or complex workflow builders. Just download and start saving time with simple automations. 👆 **Automation at your fingertips**: Call up Magical anywhere, anytime. The app speeds up repetitive tasks like messaging, data entry, and more as you work. Top Use Cases for Magical **👋 Customer service & support** • Communicate fast and close more customer tickets. • Call up template responses without taking your hands off the keyboard. • Automatically fill in your customer's details to personalize your comms. • Magical has official integrations with customer support tools like Zendesk, Intercom, Freshdesk, Gmail, and more. **🎯 Sourcing workflows for Recruiting:** • Close more candidates by sending personalized outreach messages 10X faster. • Source candidates to sheets with one click to track the recruitment pipeline. • Add candidates to your applicant tracking system directly from sources like LinkedIn. • Magical has official integrations with ATS recruiting tools like Greenhouse, Lever, WorkDay, and more. **💰 Prospecting workflows for Sales** • Make more money by speeding through repetitive prospecting tasks. • Send perfectly personalized sales messages 10X faster. • Autofill lead contact info, tags, and records into your CRM—instantly. • Magical has official integrations with sales tools like Salesforce, HubSpot, Zoho, and more. 🏥 **Healthcare professionals:** • Reduce burnout by speeding through repetitive typing tasks. • Add notes to your electronic medical record (EMR) in record time. • Automatically move patient info into forms for insurance claims, prescriptions, and more. • Magical has official integrations with healthcare tools like Epic, Medhost, Allscripts, and more. 👩‍🏫 **Educators** • Save time on admin work by automating your everyday tasks. • Add notes and grades to your learning management system (LMS) in an instant. • Send personalized messages to students and parents using pre-baked templates. • Magical has official integrations with education tools like Canvas, Brightspace, and Google Classroom. 👩‍💼 **Operations & Admins** • Speed through your repetitive tasks to get more done in the day. • Personalize and send repetitive internal or external messages 10X faster. • Move data between different websites and web apps to ensure accuracy—every time. • Automate tasks for your finance, admin, project management, and other teams. **🌱 Small Business and Entrepreneurs:** -Build brand consistency and allow anyone to answer frequently asked questions from customers via email, chat, or social media channels. - Manage your customer contacts in your CRM, or candidates in your ATS. ✈️ **Personal use:** • Get more done in the day by automating your busywork. • Send repetitive messages with personal details in an instant. • Fill out forms and spreadsheets in the blink of an eye. • Use Magical on any website or web app—anywhere, anytime. **💬 Text-expansion & messaging:** Tired of remembering Zoom links, email addresses, phrases about your company, FAQs and/or frequent email templates that you type repeatedly? Magical allows you to save time and increase accuracy by creating shortcuts of text you commonly use. Save time, typos, and the satisfaction of going back to things you love the most in your day. 📰 Critical Acclaim: - Recognized by several sources, including TechCrunch, LifeHacker, PCMag, Fast Company, and Business Insider. The app name was formerly Auto Text Expander For Google and is also known as GetMagical, Magical AI, or simply Magical. TextExpander® is a registered trademark of SmileOnMyMac, LLC. Google is a trademark of Google Inc. Use of this trademark is subject to Google permissions. All other trademarks are conveyed to you as customers, reference on compatibility, or alternatives.

User reviews

Extension files

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.

URLs
279
IPv4
55

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

No URLs found
No IP addresses found

334 indicators in this extension

334 indicators
0 versions analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe
Version
Size
Verdict
Findings
Permhash
3.37.4
Latest
14.11 MBNot scanned—
f949fbce8e5ab563d74853df7805ace3aded8fcaf2bf921c2417ea9c0455e9df
3.51.4
15.14 MBNot scanned—
f949fbce8e5ab563d74853df7805ace3aded8fcaf2bf921c2417ea9c0455e9df
3.55.8
19.25 MBNot scanned—
f949fbce8e5ab563d74853df7805ace3aded8fcaf2bf921c2417ea9c0455e9df
3.57.2
19.37 MBNot scanned—
f949fbce8e5ab563d74853df7805ace3aded8fcaf2bf921c2417ea9c0455e9df
3.58.2
12.66 MBNot scanned—
f949fbce8e5ab563d74853df7805ace3aded8fcaf2bf921c2417ea9c0455e9df
3.59.2
12.67 MBNot scanned—
f949fbce8e5ab563d74853df7805ace3aded8fcaf2bf921c2417ea9c0455e9df
3.62.4
11.95 MBNot scanned—
f949fbce8e5ab563d74853df7805ace3aded8fcaf2bf921c2417ea9c0455e9df
3.63.1
11.95 MBNot scanned—
f949fbce8e5ab563d74853df7805ace3aded8fcaf2bf921c2417ea9c0455e9df
3.64.4
11.91 MBNot scanned—
f949fbce8e5ab563d74853df7805ace3aded8fcaf2bf921c2417ea9c0455e9df
3.65.1
11.93 MBNot scanned—
f949fbce8e5ab563d74853df7805ace3aded8fcaf2bf921c2417ea9c0455e9df
Showing 1 to 10 of 60 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

Gain full insight into all external connections.

Upgrade for full visibility.

Popular in Productivity