Chrome Web StoreCaution required
Suspicious in code review (v1.0.1)
Our reviewer found behaviour consistent with malware in version 1.0.1, but not enough to confirm it. Treat this extension as untrusted until it has been re-reviewed.
4 indicators in this extension
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
What our analysis found
Save Image To Google Photos, used by 60,000 people, is rated caution by Extension Auditor. Our code review reported 2 findings (1 high, 1 medium), led by other. Its permissions mean it can inject scripts into pages.
Key findings
- High
Other
The bundled manifest requests broad host permissions ([domain withheld], [domain withheld]) and includes storage and tabs, which are significantly broader than the published manifest summary (manifest v3 with only [domain withheld] host permission, activeTab, and scripting). This discrepancy suggests the reviewed version may have excessive permissions that were later reduced, or it could indicate a policy violation. The broad permissions are not justified by the extension's stated purpose of saving images to Google Photos.
- Medium
Tracking
This configuration defines URLs for an update server, install page, and uninstall page on the publisher's domain ([domain withheld]). Although the actual code is in the minified update. (not provided for review), the presence of these URLs strongly suggests the extension pings them on, which constitutes tracking of user behavior. The CWS listing declares no data collection, and this behavior is not disclosed.
Analyst notes
The extension's core functionality appears legitimate, but several red flags exist: (1) The bundled manifest (v2) requests broad permissions ([domain withheld], [domain withheld], storage, tabs) that are not present in the published CWS manifest (v3), indicating either an outdated version or a potential permission reduction in a later update. (2) The file defines URLs on [domain withheld] for update, install, and uninstall, suggesting tracking or update-checking behavior not disclosed in the CWS data collection policy. (3) The publisher has a history of malicious extensions (18% of other extensions flagged). No direct exfiltration or injection code was found, but the update mechanism and permission mismatch raise suspicion.
Save Image To Google Photos Chrome extension security report
ID: djakijfdccnmmnknpmphdkkjbjfenkne
Supported Languages
Extension Info & Metadata
Publisher Contextual Analysis
- Author
- Cool Apps
- Privacy
- Privacy Policy
- MX records exist
- Yes
- Domain exists
- Yes
- Is disposable
- No
- Is role-based
- No
- Mailbox exists
- Yes
- Website
- Visit
Screenshots & videos
Install growth
Sensitive Domain Access
This extension has access to the following sensitive domains:
- https://photoslibrary.googleapis.com/*
4 indicators in this extension
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
About this extension
Save Images to Google Photos with right click
Read the publisher’s full description
Upload images to Google Photos Save any picture you find on the internet right into your Google Photos! Create new albums and upload with one click! Pick which albums shows up on your right-click menu. This very popular feature is back and better then ever! With unlimited and free storage, you'll never have to worry about storage again! Save to any album on your account and have your precious photos everywhere you go! Duplicate pictures are automatically handled for you! This extension is not affiliated with Google Photos or Google Photos Team. Please visit https://photos.google.com for Google Photos. Google Photos and the related logo are trademarks of Google LLC. Use of these trademarks are subject to Google Permissions.
User reviews
Extension files
Browse and explore files within this extension package
Gain full insight into all external connections.
Upgrade for full visibility.
URLs
View the external URLs this extension communicates with to understand its network activity and data interactions.
4 indicators in this extension
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
Code Diff
Compare extension code between any two versions.
0 changed files detected
No comparable text files found between these versions.
Gain full insight into all external connections.
Upgrade for full visibility.
Related extensions
More from Cool Apps
- Word Cloud Generator™60,000 users
- HTML5 Video Speed Control40,000 users
- Video Downloader20,000 users
- Floating Video Player for Youtube™ Videos20,000 users
- Auto HD for Youtube10,497 users
Popular in Workflow & Planning
- Adobe Acrobat: PDF edit, convert, sign tools344,000,000 users
- Application Launcher For Drive (by Google)99,000,000 users
- AdBlock — block ads across the web65,000,000 users
- Chrome Remote Desktop41,000,000 users
- Adblock Plus - free ad blocker40,000,000 users