Chrome Web Store
1Versions
0Code reviewed

Not reviewed

No code review on record

We have not reviewed this extension’s code, so we cannot vouch for it either way. Check the permissions below to decide whether it asks for more than it needs.

Want us to read this extension's code? Ask for a review and we'll queue it.

2 indicators in this extension

2 indicators
0 versions analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

What our analysis found

OnPapr — application copilot is not yet reviewed by Extension Auditor. Its permissions mean it can inject scripts into pages. It was last updated in May 2026.

OnPapr — application copilot

OnPapr — application copilot Chrome extension security report

ID: khbcadkmphphopahicheepbdabbdfagg

Supported Languages

🇺🇸English

Extension Info & Metadata

Status
Active
Version
0.1.0
Size
0.08 MB
Rating
0.0/5
Reviews
0
Users
4
Type
Extension
Updated
May 23, 2026
Category
Tools
Price
Free
Featured
No
Visibility
Listed
Mature
No
By Google
No
Trusted
No
This publisherTrack record
1extension
All still listed

Publisher Contextual Analysis

Author
mohit1007
MX records exist
Yes
Domain exists
Yes
Is disposable
No
Is role-based
No
Mailbox exists
Yes
Website
Visit
Extensions
1
Active
1
Obsolete
0
Listed
1
Unlisted
0
Users
4

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Screenshots & videos

Screenshot 1
Screenshot 2
Screenshot 3
Screenshot 4
Screenshot 5

Install growth

Item
Type
Severity
Description
scripting
Permission
Critical
This permission allows injection and execution of JavaScript on any webpage. Rated Critical because it can modify page content, steal sensitive data, and inject malicious code into any site the extension has access to.
identity
Permission
High
This permission accesses Chrome identity service and user information. Rated High because it can obtain OAuth tokens, access connected accounts, and impersonate the user in authenticated service.
Contextual Risk Factors
Risk Factor
High
The following context increases the overall risk:• 20% increase: Access to sensitive domains increases potential impact
storage
Permission
Medium
This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
activeTab
Permission
Medium
This permission grants temporary access to the current tab. Rated Medium because it can access current page content when invoked, though limited to user-initiated actions.
https://boards.greenhouse.io/*
Host
Medium
Host permission — access limited to this URL pattern.
https://boards-api.greenhouse.io/*
Host
Medium
Host permission — access limited to this URL pattern.
https://job-boards.greenhouse.io/*
Host
Medium
Host permission — access limited to this URL pattern.
https://jobs.lever.co/*
Host
Medium
Host permission — access limited to this URL pattern.
https://jobs.ashbyhq.com/*
Host
Medium
Host permission — access limited to this URL pattern.
https://www.linkedin.com/jobs/*
Host
Medium
Host permission — access limited to this URL pattern.
https://*.careers/*
Host
Medium
Host permission — access limited to this URL pattern.
Access to Sensitive Domains
Risk Factor
Medium
This extension requests access to sensitive domains: https://www.linkedin.com/jobs/*
contextMenus
Permission
Low
This permission adds items to browser context menus. Rated Medium because it only modifies right-click menus without access to page content.

2 indicators in this extension

2 indicators
0 versions analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

About this extension

Tailored resume + cover letter + interview prep on every job posting.

Read the publisher’s full description

OnPapr.ai turns any job description into a tailored resume, cover letter, and interview prep package in about a minute. The extension lights up the OnPapr icon on supported job pages — Greenhouse, Lever, Ashby, LinkedIn, .careers domains, and any company careers page you grant access to — so you can tailor your application without ever leaving the page. WHAT YOU GET FROM EVERY POSTING • Honest pre-tailor calibration. A four-band read on whether the role is actually a fit (strong fit / solid match / stretch / high gap), with the exact gaps that drove the verdict. No fake apply-rate statistics. • Tailored resume and cover letter, authored only from work you've actually shipped. Typeset in real LaTeX, not HTML printed to PDF. • Phone-screen brief. Bullet talking points tied to your profile and this specific JD. • Socratic interviewer. Practice coding, system design, and behavioural questions in chat. Short structured assessment at the end. • Four-week study plan tied to whatever gaps the role surfaced. HOW IT WORKS 1. Sign in once at onpapr.ai. The free tier covers three full tailorings per month. 2. On any supported job page, click the OnPapr icon. The extension parses the role and shows you the honest read. 3. One more click queues the tailoring — full package is ready in about a minute. SUPPORTED OUT OF THE BOX • Greenhouse hosted boards (boards.greenhouse.io and job-boards.greenhouse.io) • Lever • Ashby • LinkedIn jobs • Any .careers vanity domain (Instacart, Yelp, etc.) • Vanity careers domains backed by Greenhouse (Airbnb, Stripe, Discord, and many more) • Any other careers page when you grant per-site permission PRIVACY • We only read job descriptions from the page you click on. No background tracking, no auto-scraping. • Your profile and generated documents are yours. We never train AI models on your data. • Per-site permissions can be revoked any time from your extension settings. A free OnPapr.ai account is required. Read our full privacy policy at https://onpapr.ai/privacy.

User reviews

Extension files

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs
2

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

No URLs found
No IP addresses found

2 indicators in this extension

2 indicators
0 versions analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe
Version
Size
Verdict
Findings
Permhash
0.1.0
Latest
0.08 MBNot scanned—
e40413acc046dc6fa57c3ecdedfb4ed3aae0614424e2bb352ec81b3c38078045
Showing 1 to 1 of 10 rows
Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.