Caution required
Suspicious in code review (v4.2.1)
Our reviewer found behaviour consistent with malware in version 4.2.1, but not enough to confirm it. Treat this extension as untrusted until it has been re-reviewed.
563 indicators in this extension
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
What our analysis found
Process Feedback - Writing Process Reports for Google Docs, used by 100,000 people, is rated caution by Extension Auditor. Our code review reported 2 findings (2 high), led by other. It comes from a trusted publisher and was last updated in September 2026.
Key findings
- High
Other
The bundled manifest's web_accessible_resources entry declares 'public/*', while the published CWS manifest lists specific script files (,,). This discrepancy could indicate a mismatch between the reviewed version and the live listing.
- High
Credential Theft
This script extracts the Google Docs auth token and user ID from the page and sets them as DOM attributes, potentially enabling credential theft if exfiltrated. The extension lacks OAuth permissions, indicating token usage is unauthorized.
Analyst notes
The extension includes a script () that extracts Google Docs auth tokens and user IDs, which is a credential theft risk. Additionally, the bundled manifest's web_accessible_resources differ from the published listing. No evidence of data exfiltration to third parties; data flow is between Google Docs and the publisher's own web app, as expected for the stated purpose. However, token extraction without proper OAuth consent is concerning.
Process Feedback - Writing Process Reports for Google Docs Chrome extension security report
ID: chcbikmmlhbbdkfiaaaljabpefdfajnb
Supported Languages
Extension Info & Metadata
Publisher Contextual Analysis
- Author
- Process Feedback
- Privacy
- Privacy Policy
- Help
- Help Center
- MX records exist
- Yes
- Domain exists
- Yes
- Is disposable
- No
- Is role-based
- Yes
- Mailbox exists
- Yes
- Website
- Visit
Screenshots & videos
Install growth
Sensitive Domain Access
This extension has access to the following sensitive domains:
- https://docs.google.com/*
- https://classroom.google.com/*
563 indicators in this extension
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
About this extension
Shows the edit history of a Google Docs document.
Read the publisher’s full description
📌 What is the Process Feedback extension? The Process Feedback extension is for teachers and students. It pulls the edit history of a Google Docs document and turns that history into a writing process report. In the process report, you can explore copy-paste events, the frequency and timing of breaks taken, typing fluency, time spent on each paragraph, time allocated to revision compared to initial drafting, and total typing time. ➛ Support for multiple tabs ➛ Shows user contributions ➛ Works for Google Classrooms 🛠 How do I use the extension? ➛ Step 1: Add this extension to your browser ➛ Step 2: Open your Google document ➛ Step 3: Find the “Explore Process” button near the menu bar and click on it ➛ Step 4: If you prefer the ribbon view instead, change the settings in the extension popup ❌ Unable to install the extension? ➛ To install any Chrome extension, you need to log in to Chrome. ➛ Please reload the Google Docs page after installing the extension. ➛ Your institution’s IT department may need to approve installing any new Chrome extension. 🔗 How to share the writing process report? ➛ Share Link: Copy the URL of the report link and share it. ➛ Share PDF: In the sidebar, click “Download Process Report” to download a PDF of the process report. 👤 Who is it for? The extension is primarily designed for students to self-reflect on their writing process. ⚙️ How does it work? The extension pulls the entire edit history of your Google Doc, which is already maintained by Google, and turns the writing journey into an interactive process report. 📚 How can teachers integrate it into a course? Please visit www.processfeedback.org/gdocs for step-by-step instructions on how to integrate the extension into your course. ✨ How is it different from other extensions? Unlike extensions like Draftback, this extension provides many rich features. Students can also download a PDF report or simply share a link to their process report. In a way, it is a free alternative to extensions like Draftback, Originality.ai, Revision History, and Grammarly Authorship, but with many more features. ⚠️ Limitations The extension is not well-tested with large documents with 100K+ changes or 100K+ characters. Its text styling is also not perfect yet. If you run into issues using the extension, please email us at contact@processfeedback.org. 📜 Terms and conditions By installing the extension, you agree to and acknowledge the terms and conditions at https://processfeedback.org/terms/. 🔒 Privacy policy ➛ By default, this extension does not collect any user data and runs fully locally in a user’s device. ➛ When a user chooses to save online, for sharing the report with others, it collects the author information and full edit history data of the Google Docs document. Collected data is stored only so users can view reports with the process report link and share the report with others. ➛ For co-edited documents, users should always obtain permission from all co-authors before viewing or sharing process reports. 📖 Reference/citation If you are using Process Feedback for a research project, please cite the following peer-reviewed research article: Adhikari, Badri; “Thinking Beyond Chatbots’ Threat to Education: Visualizations to Elucidate the Writing or Coding Process”; Education Sciences; 2023.
User reviews
Extension files
Browse and explore files within this extension package
Gain full insight into all external connections.
Upgrade for full visibility.
URLs
View the external URLs this extension communicates with to understand its network activity and data interactions.
563 indicators in this extension
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
Code Diff
Compare extension code between any two versions.
0 changed files detected
No comparable text files found between these versions.
Gain full insight into all external connections.
Upgrade for full visibility.
Related extensions
More from Process Feedback
Popular in Education
- Google Translate39,000,000 users
- Equatio - Math made digital5,000,000 users
- EndNote Click4,000,000 users
- Eduphoria LockDown Browser4,000,000 users
- Smoothwall Safeguarding Client (Global)3,000,000 users