Chrome Web Store
2Versions
1Code reviewed

Caution required

Suspicious in code review (v1.0.0)

Our reviewer found behaviour consistent with malware in version 1.0.0, but not enough to confirm it. Treat this extension as untrusted until it has been re-reviewed.

32 indicators in this extension

32 indicators
1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

What our analysis found

Prompt Tool - Midjourney Prompt Helper, used by 2,000 people, is rated caution by Extension Auditor. Our code review reported 2 findings (2 high), led by tracking. Its permissions mean it can read and change data on all websites.

Key findings

  • High

    Tracking

    The extension sends a rich telemetry payload — persistent UUID, user IP address, country, language, OS, browser type, and install timestamp — to Alibaba Cloud SLS ([domain withheld] / project pai-us) on install, on update, and on each user interaction. The destination is not the publisher's declared domain ([domain withheld]) and no data collection is disclosed in CWS, violating the publisher's own stated privacy policy.

  • High

    Unauthorized Data Collection

    On first install, the extension fetches the user's real IP address and geolocation from two external IP-lookup services ([domain withheld] and [domain withheld] as fallback), then persists the result in local storage for later inclusion in every telemetry event. This constitutes unauthorized collection of network identity data not disclosed anywhere in the CWS listing.

Analyst notes

The extension covertly collects the user's IP address (via [domain withheld] and [domain withheld]), generates a persistent UUID, and sends this along with OS type, browser type, country, language, and behavioral events (install, update, button clicks) to Alibaba Cloud SLS at [domain withheld] — which is not the publisher's declared domain ([domain withheld]) and is entirely undisclosed in CWS (data collection declared: none). The publisher corroborates this: other extensions by the same account are flagged malicious (100%), strongly suggesting the covert tracking is intentional. The ML score of 0.22 is low but the third-party risk score and publisher reputation both contradict it. No credential theft, remote code execution, or page-content scraping was found, which is why this stops short of likely_malicious.

Prompt Tool - Midjourney Prompt Helper

Prompt Tool - Midjourney Prompt Helper Chrome extension security report

ID: cknbjddgncdahggojmpllojloapoedao

Supported Languages

🇪🇹Amharic
🇸🇦Arabic
🇧🇩Bengali
🇧🇷Brazilian Portuguese
🇬🇧British English
🇧🇬Bulgarian
🇪🇸Catalan
🇨🇳Chinese (Simplified)
🇹🇼Chinese (Traditional)
🇭🇷Croatian
🇨🇿Czech
🇩🇰Danish
🇳🇱Dutch
🇺🇸English
🇪🇪Estonian
🇵🇭Filipino
🇫🇮Finnish
🇫🇷French
🇩🇪German
🇬🇷Greek
🇮🇳Gujarati
🇮🇱Hebrew
🇮🇳Hindi
🇭🇺Hungarian
🇮🇩Indonesian
🇮🇹Italian
🇯🇵Japanese
🇮🇳Kannada
🇰🇷Korean
🇲🇽Latin American Spanish
🇱🇻Latvian
🇱🇹Lithuanian
🇲🇾Malay
🇮🇳Malayalam
🇮🇳Marathi
🇳🇴Norwegian
🇮🇷Persian
🇵🇱Polish
🇵🇹Portuguese
🇷🇴Romanian
🇷🇺Russian
🇷🇸Serbian
🇸🇰Slovak
🇸🇮Slovenian
🇪🇸Spanish
🇰🇪Swahili
🇸🇪Swedish
🇮🇳Tamil
🇮🇳Telugu
🇹🇭Thai
🇹🇷Turkish
🇺🇦Ukrainian
🇺🇸US English
🇻🇳Vietnamese

Extension Info & Metadata

Status
Active
Version
1.0.1
Size
0.56 MB
Rating
5.0/5
Reviews
2
Users
2,000
Type
Extension
Updated
Jan 27, 2024
Category
Workflow & planning
Price
Free
Featured
Yes
Visibility
Listed
Mature
No
By Google
No
Trusted
Yes
This publisherTrack record
6extensions
5 no longer listed

Publisher Contextual Analysis

Trusted
Author
zf.extension.ai.pai
MX records exist
Yes
Domain exists
Yes
Is disposable
No
Is role-based
No
Mailbox exists
Yes
Website
Visit
Extensions
6
Active
1
Obsolete
5
Listed
6
Unlisted
0
Users
11,064

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Screenshots & videos

Screenshot 1
Screenshot 2
Screenshot 3

Install growth

Item
Type
Severity
Description
<all_urls>
Host
Critical
Broad host access — the extension can read/modify content on every website.
Broad Host Permissions
Risk Factor
High
This extension has broad host permissions allowing it to access many or all websites.
tabs
Permission
Medium
This permission enables tab management and monitoring. Rated Medium because it can track open tabs, access tab metadata, and monitor user browsing patterns.
storage
Permission
Medium
This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.

32 indicators in this extension

32 indicators
1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

About this extension

Midjourney's prompt generation assistant saves the learning cost of AI drawing creators and improves drawing efficiency.

Read the publisher’s full description

Midjourney's prompt generation assistant saves the learning cost of AI drawing creators and improves drawing efficiency. Midjourney is an AI drawing tool that has revolutionized the way we approach digital art. However, for many creators, the learning curve can be steep. It takes time and effort to master the tool's various features and functions, which can be frustrating for those who just want to focus on creating. That's where the Midjourney Prompt Helper comes in. With this plugin, creators can save time and energy by generating prompts that help guide their drawing process. Whether you're a beginner or a seasoned pro, these prompts can help inspire new ideas and push your creativity to new heights. The Midjourney Prompt Helper is easy to use and can be customized to suit your specific needs. Simply select the type of prompt you want to generate - whether it's a character, a scene, or a specific theme - and let the plugin do the rest. You'll be presented with a range of options that can help jumpstart your creative process and get you on your way to creating amazing artwork. One of the key benefits of the Midjourney Prompt Helper is that it helps eliminate the need for extensive research and learning. Rather than spending hours trying to come up with ideas or trying to figure out how to use a particular feature in Midjourney, you can rely on the plugin to provide you with the guidance you need. This frees up more time for you to focus on actually creating and perfecting your art. Another benefit of the Midjourney Prompt Helper is that it can help improve the accuracy and quality of your artwork. By providing you with prompts that are tailored to your preferences, the plugin can help guide you towards creating artwork that truly represents your vision and style. This can help you stand out from other artists and establish your own unique brand. In conclusion, the Midjourney Prompt Helper is an invaluable tool for anyone looking to improve their drawing skills and streamline their creative process. By generating prompts that are tailored to your preferences, the plugin can help you save time, increase efficiency, and create stunning artwork that truly represents your vision. So why wait? Try the Midjourney Prompt Helper today and take your art to the next level!

User reviews

Extension files

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs
14

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

No URLs found
No IP addresses found

32 indicators in this extension

32 indicators
1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe
Version
Size
Verdict
Findings
Permhash
1.0.0
Latest
0.55 MBCaution0
3fa4ea71dc11b9374d4f5997fcabd538e6e6db1f0225f2f32e92afe3c699b5ba
1.0.1
0.56 MBNot scanned—
3fa4ea71dc11b9374d4f5997fcabd538e6e6db1f0225f2f32e92afe3c699b5ba
Showing 1 to 2 of 10 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Store rankings

Where this extension appears in store category, collection and keyword rankings.