Chrome Web Store
29Versions
1Code reviewed

No malware found

In code review (v1.106.102)

Our reviewer read version 1.106.102 — the most recent version we have reviewed — and found no malicious behaviour. The version shown here has not been individually reviewed yet.

68 indicators in this extension

68 indicators
1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

What our analysis found

Opus Web Recorder, used by 2,000 people, showed no malicious code in Extension Auditor's review. Its permissions mean it can read and change data on all websites and allows unsafe code evaluation. It comes from a publisher with 5 extensions and was last updated in March 2024.

Analyst notes

Opus Web Recorder is a legitimate B2B workflow documentation tool by Epilogue Systems ([domain withheld]). All permissions are directly exercised for the core recording function: desktopCapture and tabs capture screenshots and page context during user-initiated sessions, <all_urls> content scripts monitor user interactions on whichever pages the user chooses to document, and are used only for debug diagnostics. Every API call (screenshot upload, HTML capture, step events, auth token management) resolves to publisher-owned subdomains (*.[domain withheld], *.[domain withheld], *.[domain withheld]; [domain withheld] in prod. is likely a brand of the same company). The CWS-disclosed data categories (PII, authentication info, web history, user activity, website content) match the extension's actual behavior exactly. The ML score of 1.00 and the 100% permhash cluster are systematic false positives: the permission set is intrinsically high-risk for any recorder, and the 29 cluster versions most likely represent the same extension across its 6-year version history repeatedly flagged by the same model. No obfuscation, hidden payloads, third-party exfiltration, or malicious code patterns were found.

Opus Web Recorder

Opus Web Recorder Chrome extension security report

ID: kgjcefhnfhpoodnfgndabophdflbngej

Supported Languages

🇺🇸English

Extension Info & Metadata

Status
Removed
Version
1.185.0
Size
6.32 MB
Rating
4.0/5
Reviews
1
Users
2,000
Type
Extension
Updated
Mar 4, 2024
Category
Productivity Workflow
Price
Free
Featured
No
Visibility
Unlisted
Mature
No
By Google
No
Trusted
No
This publisherTrack record
5extensions
1 no longer listed
Scanned by Extension Auditor — Low RiskDevelopers: embed this badge to link to this report.

Publisher Contextual Analysis

Author
opuseps
Country
US
MX records exist
Yes
Domain exists
Yes
Is disposable
No
Is role-based
Yes
Mailbox exists
Yes
Address
259 North Radnor Chester Road Radnor, PA 19087 US
Website
Visit
Extensions
5
Active
4
Obsolete
1
Listed
2
Unlisted
3
Users
107,010

Screenshots & videos

Screenshot 1

Install growth

Item
Type
Severity
Description
<all_urls>
Host
Critical
Broad host access — the extension can read/modify content on every website.
desktopCapture
Permission
High
This permission captures content from your desktop screens. Rated High because it can record sensitive information from any window, capture passwords, and monitor user activity.
Contextual Risk Factors
Risk Factor
High
The following context increases the overall risk:• 15% increase: Older manifest version lacks modern security controls• 25% increase: Unsafe code evaluation capabilities increase attack surface• 10% increase: About:blank access enables potential sandbox escape vectors
Broad Host Permissions
Risk Factor
High
This extension has broad host permissions allowing it to access many or all websites.
Broad Content Script Access
Risk Factor
High
This extension can inject scripts into any website.
Unsafe JavaScript Evaluation
Risk Factor
High
This extension's CSP allows "unsafe-eval".
tabs
Permission
Medium
This permission enables tab management and monitoring. Rated Medium because it can track open tabs, access tab metadata, and monitor user browsing patterns.
activeTab
Permission
Medium
This permission grants temporary access to the current tab. Rated Medium because it can access current page content when invoked, though limited to user-initiated actions.
storage
Permission
Medium
This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
unlimitedStorage
Permission
Medium
This permission removes storage quota restrictions. Rated Medium because it can store large amounts of user data without limits, potentially impacting browser performance and storing extensive tracking data.
system.memory
Permission
Medium
This permission accesses system memory information. Rated Medium because it can monitor memory usage patterns, detect other applications, and gather system state information.
system.cpu
Permission
Medium
This permission provides access to CPU usage and information. Rated Medium because it can monitor system performance, detect other applications, and potentially identify user activities.
About:blank Access
Risk Factor
Medium
This extension can run content scripts in about:blank pages.
Older Manifest Version
Risk Factor
Medium
This extension uses Manifest Version 2
alarms
Permission
Low
This permission schedules periodic tasks. Rated Low because it can only trigger events at specified times without access to sensitive data.
notifications
Permission
Low
This permission displays system notifications. Rated Low because it can only show user-visible notifications without accessing system data.
system.display
Permission
Low
This permission reads display configuration. Rated Low because it only accesses screen properties without content access.

68 indicators in this extension

68 indicators
1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

About this extension

Document websites within chrome

Read the publisher’s full description

Create documentation for your Web Application by simply clicking through your workflows. Review your steps captured prior to editing your new document. The Opus Web Recorder requires several Chrome permissions in order to accurately capture user interactions with a web application. Please review these permissions carefully as well as our Privacy Policy: https://www.epiloguesystems.com/legal/terms-conditions Requested Permissions: tabs Required to access to the url and title properties of your tabs during recording. The chrome.tabsTab to get tab information when use chrome.tabs methods activeTab Allows temporary access to the currently active tab when the user invokes the extension. We require this to record the current tab when starting a recording. <all_urls> Grants the extension access to all hosts. This permission is required for Opus to seamlessly record any chrome tab that a user may switch to as part of recording their application workflow, including applications with embedded iframes that have a different origin than the host site. storage Allows Opus to temporarily store information about your recording such as the elements clicked on and the images captured for each action. unlimitedStorage This provides storage for HTML data captured during recording to accurately detect what control a user interacted with and to better identify web page uniqueness within an application workflow. alarms This allows for timed actions within the extension for uploading recording data, logs, and checking for pending recordings. desktopCapture This permission is required to capture an image of your screen in situations where the normal tabCapture method cannot return an accurate image such as in the case of native browser dialogs. notifications Required to notify users when they have recording pending and as steps are captured during a recording session. system.memory When debug logging is enabled from the extension settings, we use this permission to gather system memory information for Epilogue Support. system.cpu When debug logging is enabled from the extension settings, we use this permission to gather system cpu information for Epilogue Support. system.display When debug logging is enabled from the extension settings, we use this permission to gather information about your display for Epilogue Support.

User reviews

Extension files

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.

URLs
68

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

No URLs found
No IP addresses found

68 indicators in this extension

68 indicators
1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe
Version
Size
Verdict
Findings
Permhash
1.180.0
Latest
6.85 MBCaution—
dc8caeeb919e90a54af28da72250d26595f7eef31858a145688ab9426d59a8c8
1.177.0
6.85 MBCaution—
dc8caeeb919e90a54af28da72250d26595f7eef31858a145688ab9426d59a8c8
1.167.0
6.85 MBCaution—
dc8caeeb919e90a54af28da72250d26595f7eef31858a145688ab9426d59a8c8
1.164.0
6.85 MBCaution—
dc8caeeb919e90a54af28da72250d26595f7eef31858a145688ab9426d59a8c8
1.162.0
6.85 MBCaution—
dc8caeeb919e90a54af28da72250d26595f7eef31858a145688ab9426d59a8c8
1.161.0
6.85 MBCaution—
dc8caeeb919e90a54af28da72250d26595f7eef31858a145688ab9426d59a8c8
1.140.0
6.85 MBCaution—
dc8caeeb919e90a54af28da72250d26595f7eef31858a145688ab9426d59a8c8
1.137.101
6.85 MBCaution—
dc8caeeb919e90a54af28da72250d26595f7eef31858a145688ab9426d59a8c8
1.134.102
6.85 MBCaution—
dc8caeeb919e90a54af28da72250d26595f7eef31858a145688ab9426d59a8c8
1.133.101
6.85 MBCaution—
dc8caeeb919e90a54af28da72250d26595f7eef31858a145688ab9426d59a8c8
Showing 1 to 10 of 30 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

Gain full insight into all external connections.

Upgrade for full visibility.