Chrome Web Store

3Versions

0Code reviewed

Not reviewed

No code review on record

We have not reviewed this extension’s code, so we cannot vouch for it either way. It is no longer listed on the Chrome Web Store.

Want us to read this extension's code? Ask for a review and we'll queue it.

14 indicators in this extension

14 indicators

0 versions analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99 Start 7-day trial — all reports

One-time payment · Secure checkout by Stripe

What our analysis found

Salesforce Inbox, used by 30,000 people, is not yet reviewed by Extension Auditor. Its permissions mean it can observe network requests. It comes from a trusted publisher and was last updated in April 2021.

Salesforce Inbox Chrome extension security report

ID: cnkgdfnjmgamkcpjdljdncfjcegpgcdg

Supported Languages

🇺🇸US English

Extension Info & Metadata

Status

Removed

Version

14.0

Size

0.04 MB

Rating

3.2/5

Reviews

101

Users

30,000

Type

Extension

Updated

Apr 6, 2021

Publisher Contextual Analysis

Trusted

Author: Salesforce
Privacy: Privacy Policy
Country: US
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes
Address: 415 Mission St 3rd Floor San Francisco, CA 94105-2504 US
Website: Visit

Extensions

Active

Obsolete

Listed

Unlisted

Users

672,042

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Screenshots & videos

Install growth

User Growth

No data available

No user growth data available for this extension

Rating Count

No data available

No rating count data available for this extension

Average Rating

No data available

No rating data available for this extension

See plans

React Flow

Internal permhash`1176cffad0…`
1 malicious

No other extension carries this fingerprint.

Permhash (Mandiant)`6d6fa6eaf7…`
1 malicious

No other extension carries this fingerprint.

Network indicators

7 URLs and 0 IP literals were extracted from this version.

Item	Type	Severity	Description
webRequest	Permission	Critical	This permission enables the extension to monitor and analyze all web requests made by the browser. Rated Critical because it can observe all network traffic including sensitive data, track browsing behavior, and gather authentication tokens.
webRequestBlocking	Permission	Critical	This permission allows the extension to intercept, modify, or block any web request in real-time before it reaches its destination. Rated Critical because it can modify sensitive data (like passwords, credit cards) before encryption, redirect traffic to malicious sites, or block security updates.
Dangerous Permission Combination	Risk Factor	Critical	This extension can intercept, modify, and block web requests in real-time.
Dangerous Permission Combination: background,webRequest,storage	Risk Factor	High	Enables extensions to operate in the background, intercept web requests, and manage privacy settings and browsing data, facilitating concealed actions and potentially undetected modifications.
Contextual Risk Factors	Risk Factor	High	The following context increases the overall risk:• 10% increase: Early script execution enables pre-emptive content manipulation• 15% increase: Older manifest version lacks modern security controls
management	Permission	Medium	This permission manages other installed extensions. Rated Medium because it can enable/disable other extensions and modify their settings, with changes being visible to users.
storage	Permission	Medium	This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
background	Permission	Medium	This permission allows continuous background operation. Rated Medium because it can perform actions without user awareness, consume system resources, and maintain persistent connections.
gcm	Permission	Medium	This permission enables Google Cloud Messaging for push notifications. Rated Medium because it can maintain persistent connections, receive external messages, and operate in the background.
Early Content Script Execution	Risk Factor	Medium	This extension runs content scripts at document_start.
Older Manifest Version	Risk Factor	Medium	This extension uses Manifest Version 2
notifications	Permission	Low	This permission displays system notifications. Rated Low because it can only show user-visible notifications without accessing system data.
://.googleusercontent.com/*	Permission	Unknown	No classification available for this permission.
://mail.google.com/	Permission	Unknown	No classification available for this permission.
://.salesforceiq.com/*	Permission	Unknown	No classification available for this permission.
://.r1.us1.staging.riq.com/*	Permission	Unknown	No classification available for this permission.
://.r1.us1.prod.riq.com/*	Permission	Unknown	No classification available for this permission.
://.salesforce.com/*	Permission	Unknown	No classification available for this permission.

14 indicators in this extension

14 indicators

0 versions analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99 Start 7-day trial — all reports

One-time payment · Secure checkout by Stripe

About this extension

Sell Smarter with Salesforce Inbox

Read the publisher’s full description

Salesforce Inbox brings the world’s #1 CRM right to your inbox. Powered by Einstein, Inbox uses artificial intelligence to help your sales reps sell smarter. It recommends follow-ups for emails so important opportunities never slip through the cracks. It automates administrative tasks so reps can spend more time selling. And it allows everyone to discover key insights while they’re on the go so customer meetings become more meaningful and productive.

User reviews

2.6 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

Hi , Is this extesion expiring on 31st March 2021 ?

Jemima Leela P S·10 Mar 2021

Works intermittently, app disappears for a few weeks then re-appears. Email opens lag for days so pointless. Avoid!

Bryan Dobson·13 Dec 2020

Easy to use to quickly actions like schedule a meeting options

Edwin Pardo·30 Jul 2020

Extension files

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

No URLs found

No IP addresses found

14 indicators in this extension

14 indicators

0 versions analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99 Start 7-day trial — all reports

One-time payment · Secure checkout by Stripe

Version	Size	Verdict	Findings	Permhash
13.4 Latest	0.04 MB	Caution	—	5451e4093801d125231c9c766d5975a2bfafafb84567a38527d15a79694fed54
13.3	0.04 MB	Caution	—	893c8ad0908e6b95938e7b00be31f2769fe8af60863d5ba08cddcd5515ade0c8
14.0	0.04 MB	Caution	—	6d6fa6eaf7762aa79f9a8f4630ddd8aa336f36825e2972db422c2d0689a91ab7

Showing 1 to 3 of 10 rows

Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Not reviewed

14 indicators in this extension

What our analysis found