Chrome Web StoreNo malware found
In code review
Our reviewer read this extension’s code and found no malicious behaviour. Review the permissions below before installing.
1 medium-severity finding in this extension’s code
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
What our analysis found
MaxFocus: Link Preview & AI Assistant, used by 10,000 people, showed no malicious code in Extension Auditor's review. Our code review reported 1 finding (1 medium), led by network interception. Its permissions mean it can read and change data on all websites.
Key findings
- Medium
Network Interception
When the user opens any preview (via `@ ` message), these session rules strip `X-Frame-Options`, `Frame-Options`, and `Content-Security-Policy` from every response for every resource type, with no URL filter scoping the rule to the preview URL. This means while a preview is active, all other sites the user browses simultaneously also have their CSP and framing protections removed — broader than necessary for the iframe feature alone. No corresponding automatic disable is triggered when the preview is closed, so the headers remain stripped for the rest of the service-worker lifetime. This is an implementation scope concern, not intentional malice, but it meaningfully weakens browser security while in use.
Analyst notes
MaxFocus is a legitimate link-preview extension. The `declarativeNetRequest` rules that strip `X-Frame-Options`, `Frame-Options`, and `Content-Security-Policy` from responses (:127-157) are the direct technical mechanism the extension needs to iframe any URL — no malicious payload, no exfiltration, and they are applied only as dynamic session rules triggered by the sidepanel when a preview loads. All outbound network calls go to the publisher's own domain (`[domain withheld]`) for subscription, or to `[domain withheld]` for paywall bypass — both consistent with the extension's stated purpose; no third-party tracking destinations were found. The ML critical score (0.75) is explained by the `declarativeNetRequest` + `*://*/*` + `document_start` combination, which is the minimum viable permission set for any iframe-based link-preview product; the 49% malware rate in the permhash cluster reflects that this exact permission combo is also used by extensions, not that this extension is one. Chrome-stats gives likelihood, the publisher holds a Google trusted badge, the listing is CWS-featured, and the extension is 901 days old with 10 k users — all contradicting the ML flag.
MaxFocus: Link Preview & AI Assistant Chrome extension security report
ID: bnacincmbaknlbegecpioobkfgejlojp
Supported Languages
Extension Info & Metadata
Publisher Contextual Analysis
- Author
- maxfoc.us
- Privacy
- Privacy Policy
- MX records exist
- Yes
- Domain exists
- Yes
- Is disposable
- No
- Is role-based
- No
- Mailbox exists
- Yes
- Website
- Visit
Screenshots & videos
Install growth
- 1 medium
The file, code excerpt and explanation behind each finding are part of the full report. No conclusion has been withheld — only the evidence. The verdict above already reflects everything found here.
1 medium-severity finding in this extension’s code
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
About this extension
Preview links directly from your current tab and maintain your concentration.
Read the publisher’s full description
MaxFocus is perfect for smoothly navigating through your social media and news feeds, watching videos without interruptions, and reading articles without cluttering your browser with multiple tabs. It's an ideal tool for students and professionals who must focus on their tasks. Key features: 1. Powerful link previews • Preview in popup: Instantly view any link in a dedicated popup window without leaving your current page • Move to sidebar: Easily transfer any preview from the popup to a sidebar for a convenient split-screen experience • Customizable options: — Choose how to open or close previews: drag, long click, hover, or with keyboard shortcuts — Customize your popup color themes (PRO Feature) — And many more! 2. AI Sidebar & assistant • Chat with AI: Get instant answers and summaries right on your viewing webpage. The AI understands the content and delivers relevant information • Auto Prompts: Receive helpful suggestions and prompts tailored to the page you're interacting with • YouTube AI summaries: Make summaries of your favorite videos. We'll transcribe all the videos for you 3. Stay focused and organized • Reader view: Convert any webpage to a clean, distraction-free format for easy reading. Dark Mode is available for a comfortable reading experience at night • Video focus mode: Watch videos without sidebars or click-away temptations. Just the video, nothing else • Spotlight: Press Alt+Z on any page to access your favorite links. Click a link to open it in a popup for easy viewing 4. Security • Scam detector: Browse with confidence — get alerts about potential threats like malware, phishing, or ransomware • UTM tags remover: Preview links without the hassle of UTM tags • Data privacy: Your privacy is our priority. We don’t collect any of your data. Frequently asked questions: • Is MaxFocus free to use? — MaxFocus provides a limited free plan. For unlimited access, consider upgrading to a PRO Plan • What features are exclusive to the PRO Plan? — PRO users enjoy benefits like AI-powered assistance, scam detection, advanced theme customization, and unlimited link previews • Do I need an OpenAI account for the AI features? — No, you don’t need an OpenAI account. Upgrade to a MaxFocus PRO plan to unlock the AI capabilities • Will it work on all websites? — MaxFocus is compatible with most websites, providing link previews, AI support, and more across various platforms Contact us: If you have any questions or suggestions, feel free to email us at hello@maxfoc.us No matter what you need — whether it's Notion link previews, link previews in Google search, an Arc alternative, student productivity tools, help to manage a ton of tabs or simply a better browsing experience — try MaxFocus today!
User reviews
Extension files
Browse and explore files within this extension package
Gain full insight into all external connections.
Upgrade for full visibility.
URLs
View the external URLs this extension communicates with to understand its network activity and data interactions.
1 medium-severity finding in this extension’s code
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
Code Diff
Compare extension code between any two versions.
0 changed files detected
No comparable text files found between these versions.
Gain full insight into all external connections.
Upgrade for full visibility.
Related extensions
Popular in Tools
- Montara Chrome Extension639,000,000 users
- 迅雷下载支持87,000,000 users
- Passlit Openbook10,000,000 users
- Zotero Connector9,000,000 users
- Browsec VPN - Free VPN for Chrome8,000,000 users