Chrome Web Store

4Versions

1Code reviewed

No malware found

In code review (v1.0)

Our reviewer read version 1.0 — the most recent version we have reviewed — and found no malicious behaviour. The version shown here has not been individually reviewed yet.

What our analysis found

OkBro – 3D AI Assistant showed no malicious code in Extension Auditor's review. Its permissions mean it can read and change data on all websites and can inject scripts into pages. It comes from a publisher with 3 extensions and was last updated in October 2026.

Analyst notes

The extension's own core files (,,) contain no active malicious code: is entirely commented-out, has its main handler commented out and only runs a trivial focus-check interval, and is a verbatim copy of Google's Chrome bookmarks sample. The CSP in enforces `script-src 'self'` which blocks any remote code loading. The ML score of 1.0 is a false positive driven almost entirely by the 46 bundled third-party plugin files (,, etc.), which inflate every metric (innerHTML, appendChild, createElement, base64, etc.) while contributing no malicious behavior. The permhash cluster '100% flagged' stat is circular — the cluster size is 1 (the extension itself).

OkBro – 3D AI Assistant Chrome extension security report

ID: iilpnbffkfipcppcfbfapkejcojhmcbg

Extension Info & Metadata

Status

Active

Version

2026.10.8

Size

69.54 MB

Rating

5.0/5

Reviews

Users

Type

Extension

Updated

Oct 14, 2026

Publisher Contextual Analysis

Author: TechieBros Technologies
Privacy: Privacy Policy
Country: IN
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: Yes
Mailbox exists: Yes
Address: #148/2, 2nd Floor, East Bazaar Street, Sholingur, Ranipet District, CHENNAI, Tamil Nadu 631102 IN
Website: Visit

Extensions

Active

Obsolete

Listed

Unlisted

Users

4,357

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Screenshots & videos

Install growth

User Growth

Showing data from Sep 10, 2023 to Sep 08, 2024

Versions

+44.44%(+4 users)

Compared to 4 months ago

1 version released in this period

Rating Count

Total: 2 ratings

Average Rating

Current: 5.00 / 5.0

React Flow

Internal permhash`9943ac88f0…`
1 malicious

No other extension carries this fingerprint.

Permhash (Mandiant)`047a99bb07…`
1 malicious

No other extension carries this fingerprint.

Item	Type	Severity	Description
scripting	Permission	Critical	This permission allows injection and execution of JavaScript on any webpage. Rated Critical because it can modify page content, steal sensitive data, and inject malicious code into any site the extension has access to.
debugger	Permission	Critical	This permission grants the extension ability to debug and control other extensions and browser tabs. Rated Critical because it can access and modify other extensions' internal state, inject code, and access sensitive data from any tab.
declarativeNetRequest	Permission	Critical	This permission allows the extension to define rules to block, redirect, or modify network requests. Rated Critical because it can control all network traffic, potentially blocking security updates or redirecting to malicious sites.
<all_urls>	Host	Critical	Broad host access — the extension can read/modify content on every website.
offscreen	Permission	High	This permission creates hidden browser documents with full DOM access. Rated High because it can run background operations invisibly, potentially executing malicious code without user awareness.
identity	Permission	High	This permission accesses Chrome identity service and user information. Rated High because it can obtain OAuth tokens, access connected accounts, and impersonate the user in authenticated service.
cookies	Permission	High	This permission provides full access to read and modify browser cookies. Rated High because it can steal session tokens, modify authentication cookies, and compromise accounts across websites.
clipboardRead	Permission	High	This permission allows reading clipboard content. Rated High because it can steal copied passwords, sensitive data, and monitor all content copied to clipboard.
clipboardWrite	Permission	High	This permission allows modification of clipboard content. Rated High because it can inject malicious content into the clipboard, modify copied passwords, and manipulate copied data.
topSites	Permission	High	This permission accesses the list of most visited websites. Rated High because it can reveal browsing patterns, identify frequently accessed service, and gather user behavior data.
Contextual Risk Factors	Risk Factor	High	The following context increases the overall risk: • 25% increase: Unsafe code evaluation capabilities increase attack surface
Broad Host Permissions	Risk Factor	High	This extension has broad host permissions allowing it to access many or all websites.
Broad Content Script Access	Risk Factor	High	This extension can inject scripts into any website.
Unsafe WebAssembly Execution	Risk Factor	High	This extension's CSP allows "wasm-unsafe-eval".
storage	Permission	Medium	This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
tabs	Permission	Medium	This permission enables tab management and monitoring. Rated Medium because it can track open tabs, access tab metadata, and monitor user browsing patterns.
activeTab	Permission	Medium	This permission grants temporary access to the current tab. Rated Medium because it can access current page content when invoked, though limited to user-initiated actions.
tabGroups	Permission	Medium	This permission manages tab grouping functionality. Rated Medium because it can monitor tab organization, track user workflow patterns, and modify tab relationships.
management	Permission	Medium	This permission manages other installed extensions. Rated Medium because it can enable/disable other extensions and modify their settings, with changes being visible to users.
power	Permission	Medium	This permission controls system power management features. Rated Medium because it can prevent the system from sleeping, potentially draining battery or maintaining unwanted connections.
unlimitedStorage	Permission	Medium	This permission removes storage quota restrictions. Rated Medium because it can store large amounts of user data without limits, potentially impacting browser performance and storing extensive tracking data.
https://.razorpay.com/	Host	Medium	Host permission — access limited to this URL pattern.
notifications	Permission	Low	This permission displays system notifications. Rated Low because it can only show user-visible notifications without accessing system data.
sidePanel	Permission	Low	This permission adds custom panels to the browser interface. Rated Low because it only affects browser UI elements and cannot access page content.
alarms	Permission	Low	This permission schedules periodic tasks. Rated Low because it can only trigger events at specified times without access to sensitive data.
idle	Permission	Low	This permission detects system idle state. Rated Low because it only observes user activity state without access to activity details.

About this extension

OkBro is used as a Personal Asistant, Control your Browser / Desktop & Controll IOT devices.

Read the publisher’s full description

OkBro: V1.1 Its a speech synthesis and recognition tool, which is used to controll your browser, computer & IoT devices! Usage? Open the extension -> Talk -> Control: Browser, Computer & IoT Devices If the add-on is very first time started, Please provide microphone permission. And, It should always opened/running in a tab. Advantages? It can recognize a wide variety of languages It can controll your browser It can controll desktop It can controll IoT devices V 1.1 Updates:- (New) Added countdown to the extension icon.

User reviews

5.0 out of 5 · 2 most recent reviews

Text reviews

Positive

Negative

5 for the multi wakeup name feature

Gokul .A·20 Jul 2023

This is very nice controlling browser with frequently used & favorite voice commands as shared below, 1. Can have more number of Wake-up command, like Ok Google, Hey Google, Hey Siri, etc 2. Speech typing on any page 3. Easily switch for a particular tab from any number of tabs opened in my Chrome browser. 4. Read particular/entire webpage 5. Play music/video/movie 6. Webpage scrolling etc

Dillibabu K·1 Jul 2022

Extension files

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

No network indicators were extracted from this version.

Version	Size	Verdict	Findings	Permhash
2026.10.8 Latest	69.54 MB	Caution	—	047a99bb075609b91dcbfa5c34a5d659ae775698c772f76f69a3b2882d0f6dbd
2026.9.9	134.00 MB	Not scanned	—	047a99bb075609b91dcbfa5c34a5d659ae775698c772f76f69a3b2882d0f6dbd
1.0	2.43 MB	No malware found	0	6df722a611c0290bc256c0a1df82a9400ef413a73fba3cc23c0039f314ca3344
1.1	6.85 MB	Not scanned	—	90b858262602db785c8ab1feb5e5e56507a778be0c844bc9c12b1afe7d021b0b

Showing 1 to 4 of 10 rows

Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Popular in Workflow & Planning

Adobe Acrobat: PDF edit, convert, sign tools350,000,000 users
Application Launcher For Drive (by Google)102,000,000 users
AdBlock — block ads across the web65,000,000 users
Chrome Remote Desktop41,000,000 users
Adblock Plus - free ad blocker40,000,000 users

Store rankings

Where this extension appears in store category, collection and keyword rankings.

No malware found

What our analysis found