Extension Auditor
Sign Up
Edge Add-ons
4Versions
0Code reviewed

Not reviewed

No code review on record

We have not reviewed this extension’s code, so we cannot vouch for it either way. Check the permissions below to decide whether it asks for more than it needs.

Want us to read this extension's code? Ask for a review and we'll queue it.

36 indicators in this extension

36 indicators
0 versions analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

What our analysis found

Moka, used by 4,934 people, is not yet reviewed by Extension Auditor. Its permissions mean it can read and change data on all websites and can inject scripts into pages. It was last updated in January 2026.

Moka

Moka Edge extension security report

ID: dbnjjcfhfbmneeihjphifkpgkcgioedb

Supported Languages

🇨🇳Chinese (Simplified)
🇺🇸US English

Extension Info & Metadata

Status
Active
Version
3.4.12
Size
1.07 MB
Rating
5.0/5
Reviews
1
Users
4,934
Type
Extension
Updated
Jan 22, 2026
Category
Productivity
Price
Paid
Featured
No
Visibility
Listed
Mature
No
By Google
No
Trusted
No
Download CRX
Edge Add-ons
Report Issue
This publisherTrack record
1extension
All still listed

Publisher Contextual Analysis

Author
北京希瑞亚斯科技有限公司
Privacy
Privacy Policy
Website
Visit
Extensions
1
Active
1
Obsolete
0
Listed
1
Unlisted
0
Users
4,934

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Sign Up

Screenshots & videos

Screenshot 1

Install growth

Item
Type
Severity
Description
scripting
Permission
Critical
This permission allows injection and execution of JavaScript on any webpage. Rated Critical because it can modify page content, steal sensitive data, and inject malicious code into any site the extension has access to.
userScripts
Permission
Critical
This permission allows registration of arbitrary user scripts that run in a page's main world. Rated Critical because the scripts execute with full access to page JavaScript, can be updated at runtime from remote code, and bypass the isolated world that normally contains content scripts.
declarativeNetRequestWithHostAccess
Permission
Critical
This permission combines network request modification with host permissions. Rated Critical because it can modify requests for specific domains, potentially targeting sensitive websites with precise attack rules.
debugger
Permission
Critical
This permission grants the extension ability to debug and control other extensions and browser tabs. Rated Critical because it can access and modify other extensions' internal state, inject code, and access sensitive data from any tab.
<all_urls>
Host
Critical
Broad host access — the extension can read/modify content on every website.
https://*/*
Host
Critical
Broad host access — the extension can read/modify content on every website.
http://*/*
Host
Critical
Broad host access — the extension can read/modify content on every website.
Dangerous Permission Combination: scripting,<all_urls>,cookies
Risk Factor
Critical
Enables sophisticated data theft through script injection and traffic monitoring
cookies
Permission
High
This permission provides full access to read and modify browser cookies. Rated High because it can steal session tokens, modify authentication cookies, and compromise accounts across websites.
Contextual Risk Factors
Risk Factor
High
The following context increases the overall risk:• 10% increase: Early script execution enables pre-emptive content manipulation
Broad Host Permissions
Risk Factor
High
This extension has broad host permissions allowing it to access many or all websites.
Broad Content Script Access
Risk Factor
High
This extension can inject scripts into any website.
storage
Permission
Medium
This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
unlimitedStorage
Permission
Medium
This permission removes storage quota restrictions. Rated Medium because it can store large amounts of user data without limits, potentially impacting browser performance and storing extensive tracking data.
tabs
Permission
Medium
This permission enables tab management and monitoring. Rated Medium because it can track open tabs, access tab metadata, and monitor user browsing patterns.
management
Permission
Medium
This permission manages other installed extensions. Rated Medium because it can enable/disable other extensions and modify their settings, with changes being visible to users.
Early Content Script Execution
Risk Factor
Medium
This extension runs content scripts at document_start.
alarms
Permission
Low
This permission schedules periodic tasks. Rated Low because it can only trigger events at specified times without access to sensitive data.
notifications
Permission
Low
This permission displays system notifications. Rated Low because it can only show user-visible notifications without accessing system data.

36 indicators in this extension

36 indicators
0 versions analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

About this extension

Export resumes to Moka Recruiting with one click

Read the publisher’s full description

Moka简藏V3版本 ▻ 一键导入简历至Moka 一键导入招聘网站的简历至您的Moka招聘系统，在搜索简历时，不再需要下载再上传等一系列繁琐操作来录入简历到您的Moka招聘系统。导入的内容包含： - 完整的简历 - 基本信息的自动解析与补全，如姓名、联系方式、工作经验等 - 直接分配应聘职位 ▻ 简历查重 Moka简藏会进行简历查重，避免重复购买您的Moka招聘系统已经存在的简历。 ▻ 一键发布刷新职位 让您在多个招聘网站发布职位、刷新更便捷，省去不必要的重复工作，让工作更轻松。 ▻ 快速购买简历 方便您快速查找、购买第三方渠道的简历，并同步信息到您的Moka招聘系统 目前支持的网站有boss直聘，智联，51job，猎聘，拉勾。如需更多招聘网站的支持，请反馈至support@mokahr.com ───────────────────────────── ⚠ 你需要一个Moka账号才能使用Moka简藏插件。详情请移步：https://app.mokahr.com 隐私政策：https://public-cdn.mokahr.com/chromoka_policies.html

User reviews

Extension files

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Sign Up
URLs
35
IPv4
1

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

No URLs found
No IP addresses found

36 indicators in this extension

36 indicators
0 versions analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe
Version
Size
Verdict
Findings
Permhash
3.3.9
Latest
1.04 MBNot scanned—
0b10ed9232533eb684a4e2d3b796ba5fae33a2c7d0a5290f015dfab6d9b5bd02
3.4.2
1.05 MBNot scanned—
0b10ed9232533eb684a4e2d3b796ba5fae33a2c7d0a5290f015dfab6d9b5bd02
3.4.11
1.10 MBNot scanned—
0b10ed9232533eb684a4e2d3b796ba5fae33a2c7d0a5290f015dfab6d9b5bd02
3.4.12
1.07 MBNot scanned—
0b10ed9232533eb684a4e2d3b796ba5fae33a2c7d0a5290f015dfab6d9b5bd02
Showing 1 to 4 of 10 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Sign Up

Related extensions

Popular in Productivity