Caution required
Suspicious in code review (v1.0.0)
Our reviewer found behaviour consistent with malware in version 1.0.0, but not enough to confirm it. Treat this extension as untrusted until it has been re-reviewed.
32 indicators in this extension
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
What our analysis found
Prompt Tool - Midjourney Prompt Helper, used by 2,000 people, is rated caution by Extension Auditor. Our code review reported 2 findings (2 high), led by tracking. Its permissions mean it can read and change data on all websites.
Key findings
- High
Tracking
The extension sends a rich telemetry payload — persistent UUID, user IP address, country, language, OS, browser type, and install timestamp — to Alibaba Cloud SLS ([domain withheld] / project pai-us) on install, on update, and on each user interaction. The destination is not the publisher's declared domain ([domain withheld]) and no data collection is disclosed in CWS, violating the publisher's own stated privacy policy.
- High
Unauthorized Data Collection
On first install, the extension fetches the user's real IP address and geolocation from two external IP-lookup services ([domain withheld] and [domain withheld] as fallback), then persists the result in local storage for later inclusion in every telemetry event. This constitutes unauthorized collection of network identity data not disclosed anywhere in the CWS listing.
Analyst notes
The extension covertly collects the user's IP address (via [domain withheld] and [domain withheld]), generates a persistent UUID, and sends this along with OS type, browser type, country, language, and behavioral events (install, update, button clicks) to Alibaba Cloud SLS at [domain withheld] — which is not the publisher's declared domain ([domain withheld]) and is entirely undisclosed in CWS (data collection declared: none). The publisher corroborates this: other extensions by the same account are flagged malicious (100%), strongly suggesting the covert tracking is intentional. The ML score of 0.22 is low but the third-party risk score and publisher reputation both contradict it. No credential theft, remote code execution, or page-content scraping was found, which is why this stops short of likely_malicious.
Prompt Tool - Midjourney Prompt Helper Chrome extension security report
ID: cknbjddgncdahggojmpllojloapoedao
Supported Languages
Extension Info & Metadata
Publisher Contextual Analysis
- Author
- zf.extension.ai.pai
- Privacy
- Privacy Policy
- MX records exist
- Yes
- Domain exists
- Yes
- Is disposable
- No
- Is role-based
- No
- Mailbox exists
- Yes
- Website
- Visit
You reached today's free scan limit (3/3 unique extensions).
Upgrade for full visibility.
Screenshots & videos
Install growth
32 indicators in this extension
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
About this extension
Midjourney's prompt generation assistant saves the learning cost of AI drawing creators and improves drawing efficiency.
Read the publisher’s full description
Midjourney's prompt generation assistant saves the learning cost of AI drawing creators and improves drawing efficiency. Midjourney is an AI drawing tool that has revolutionized the way we approach digital art. However, for many creators, the learning curve can be steep. It takes time and effort to master the tool's various features and functions, which can be frustrating for those who just want to focus on creating. That's where the Midjourney Prompt Helper comes in. With this plugin, creators can save time and energy by generating prompts that help guide their drawing process. Whether you're a beginner or a seasoned pro, these prompts can help inspire new ideas and push your creativity to new heights. The Midjourney Prompt Helper is easy to use and can be customized to suit your specific needs. Simply select the type of prompt you want to generate - whether it's a character, a scene, or a specific theme - and let the plugin do the rest. You'll be presented with a range of options that can help jumpstart your creative process and get you on your way to creating amazing artwork. One of the key benefits of the Midjourney Prompt Helper is that it helps eliminate the need for extensive research and learning. Rather than spending hours trying to come up with ideas or trying to figure out how to use a particular feature in Midjourney, you can rely on the plugin to provide you with the guidance you need. This frees up more time for you to focus on actually creating and perfecting your art. Another benefit of the Midjourney Prompt Helper is that it can help improve the accuracy and quality of your artwork. By providing you with prompts that are tailored to your preferences, the plugin can help guide you towards creating artwork that truly represents your vision and style. This can help you stand out from other artists and establish your own unique brand. In conclusion, the Midjourney Prompt Helper is an invaluable tool for anyone looking to improve their drawing skills and streamline their creative process. By generating prompts that are tailored to your preferences, the plugin can help you save time, increase efficiency, and create stunning artwork that truly represents your vision. So why wait? Try the Midjourney Prompt Helper today and take your art to the next level!
User reviews
Extension files
Browse and explore files within this extension package
You reached today's free scan limit (3/3 unique extensions).
Upgrade for full visibility.
URLs
View the external URLs this extension communicates with to understand its network activity and data interactions.
32 indicators in this extension
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
Code Diff
Compare extension code between any two versions.
0 changed files detected
No comparable text files found between these versions.
You reached today's free scan limit (3/3 unique extensions).
Upgrade for full visibility.
Related extensions
More from zf.extension.ai.pai
Popular in Workflow & Planning
- Adobe Acrobat: PDF edit, convert, sign tools347,000,000 users
- Application Launcher For Drive (by Google)101,000,000 users
- AdBlock — block ads across the web65,000,000 users
- Chrome Remote Desktop41,000,000 users
- Adblock Plus - free ad blocker40,000,000 users
Store rankings
Where this extension appears in store category, collection and keyword rankings.