Chrome Web Store
12Versions
5Code reviewed

No malware found

In code review

Our reviewer read this extension’s code and found no malicious behaviour. Review the permissions below before installing.

8 indicators in this extension

8 indicators
5 versions analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

What our analysis found

Save Story for Instagram, used by 100,000 people, showed no malicious code in Extension Auditor's review. Its permissions mean it can read and change data on all websites and can inject scripts into pages. It comes from a trusted publisher and was last updated in August 2026.

Analyst notes

Every code path in this bundle implements the listed feature set: ` ` and ` ` are hostname-gated (`:2`, `:2`) and only inject namespaced download buttons; the only network destinations are `[domain withheld]` and `[domain withheld]` first-party APIs, and media URLs are handed to `chrome.downloads.download` in `:4102`/`4234`, never to a collection server. `declarativeNetRequest` is used solely to set an iPhone user-agent on `*://*.[domain withheld] while the mobile popup window is focused (`:44-70`), which is exactly the advertised 'Instagram mobile site on desktop' feature, so the permhash cluster's 71% malware rate and the risk engine's Critical score are both explained by permission breadth rather than behaviour. I withhold `false_positive` for one reason: `:4046` fetches `[domain withheld] on install and stores it in `chrome.storage.local.settings`, and nothing in the bundle ever reads that key (the only storage read is `:4216` for `downloadCounter`/`rated`) — a dormant publisher-controlled config channel that a future update could act on. Two hygiene issues, not findings: `:132` registers a `window.addEventListener("message")` handler with no origin or source check, so any frame on a [domain withheld] page can post an `[domain withheld] string and silently trigger a `saveAs:false` download with an attacker-chosen extension; and the `openig` ping sent on every page load falls through to the `downloadCounter` increment in `:4215`, which is why reviewers complain about the rate-us nag. ` ` (SweetAlert2) is referenced by no manifest entry, no HTML and no `executeScript` call, so it is dead code. No WhatsApp or `[domain withheld]` string appears anywhere in this version, so the [domain withheld] spamware linkage in the internal note is not corroborated by 1.8.3's code.

Save Story for Instagram

Save Story for Instagram Chrome extension security report

ID: lknpbgnookklokdjomiildnlalffjmma

Supported Languages

🇸🇦Arabic
🇧🇷Brazilian Portuguese
🇬🇧British English
🇨🇳Chinese (Simplified)
🇳🇱Dutch
🇺🇸English
🇫🇷French
🇩🇪German
🇮🇳Hindi
🇮🇩Indonesian
🇮🇹Italian
🇯🇵Japanese
🇰🇷Korean
🇲🇽Latin American Spanish
🇵🇱Polish
🇵🇹Portuguese
🇷🇺Russian
🇪🇸Spanish
🇹🇭Thai
🇹🇷Turkish
🇺🇦Ukrainian
🇺🇸US English
🇻🇳Vietnamese

Extension Info & Metadata

Status
Active
Version
1.8.3
Size
0.78 MB
Rating
3.8/5
Reviews
985
Users
100,000
Type
Extension
Updated
Aug 12, 2026
Category
Social networking
Price
Free
Featured
Yes
Visibility
Listed
Mature
No
By Google
No
Trusted
No
This publisherTrack record
1extension
All still listed
Scanned by Extension Auditor — Low RiskDevelopers: embed this badge to link to this report.

Publisher Contextual Analysis

Trusted
Author
Social App.
MX records exist
Yes
Domain exists
Yes
Is disposable
No
Is role-based
No
Mailbox exists
Yes
Extensions
1
Active
1
Obsolete
0
Listed
1
Unlisted
0
Users
100,000

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Screenshots & videos

Screenshot 1
Screenshot 2
Screenshot 3
Screenshot 4

Install growth

Item
Type
Severity
Description
declarativeNetRequest
Permission
Critical
This permission allows the extension to define rules to block, redirect, or modify network requests. Rated Critical because it can control all network traffic, potentially blocking security updates or redirecting to malicious sites.
scripting
Permission
Critical
This permission allows injection and execution of JavaScript on any webpage. Rated Critical because it can modify page content, steal sensitive data, and inject malicious code into any site the extension has access to.
<all_urls>
Host
Critical
Broad host access — the extension can read/modify content on every website.
downloads
Permission
High
This permission controls file downloads and accesses download history. Rated High because it can download malicious files, access sensitive downloaded documents, and track user download patterns.
Contextual Risk Factors
Risk Factor
High
The following context increases the overall risk:• 10% increase: Early script execution enables pre-emptive content manipulation
Broad Host Permissions
Risk Factor
High
This extension has broad host permissions allowing it to access many or all websites.
Broad Content Script Access
Risk Factor
High
This extension can inject scripts into any website.
storage
Permission
Medium
This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
tabs
Permission
Medium
This permission enables tab management and monitoring. Rated Medium because it can track open tabs, access tab metadata, and monitor user browsing patterns.
Early Content Script Execution
Risk Factor
Medium
This extension runs content scripts at document_start.
system.display
Permission
Low
This permission reads display configuration. Rated Low because it only accesses screen properties without content access.

Each row lists a threat category the scanner evaluates. A checkmark means the review ran and found no matching issues in that category for this version.

  • Data Exfiltration

    Code review completed; no malicious patterns detected for this category.

  • Unauthorized Data Collection

    Code review completed; no malicious patterns detected for this category.

  • Network Interception

    Code review completed; no malicious patterns detected for this category.

  • Code Injection

    Code review completed; no malicious patterns detected for this category.

  • Credential Theft

    Code review completed; no malicious patterns detected for this category.

  • Obfuscation

    Code review completed; no malicious patterns detected for this category.

  • Tracking

    Code review completed; no malicious patterns detected for this category.

  • Privilege Escalation

    Code review completed; no malicious patterns detected for this category.

  • Phishing

    Code review completed; no malicious patterns detected for this category.

  • Remote Code Loading

    Code review completed; no malicious patterns detected for this category.

  • Other

    Code review completed; no malicious patterns detected for this category.

8 indicators in this extension

8 indicators
5 versions analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

About this extension

Download stories from Instagram, Facebook and also save videos or photos. Run desktop version Instagram with all functions.

Read the publisher’s full description

This very simple Chrome extension for downloading videos and photos or stories from Facebook and Instagram with one click and also allows you to access to the Instagram mobile website like you can do on your smartphone but on your computer! Just click on the extension icon in the toolbar (in the upper right corner of the browser) and get all the functions like in the mobile app. ☑️ Download videos and stories from Facebook One of the key highlights of our extension is its seamless one-click video download feature for Facebook. Whether it's a fleeting yet memorable story from your friends or a favorite page, this extension allows you to save Facebook stories effortlessly in just seconds. ☑️ Download videos and stories from Instagram Instagram is renowned for its stunning photos and videos, and our extension makes downloading them effortless. Whether it's a captivating image or an inspiring short clip, you can save them all with just one click, ensuring you always have access to the content you love. - Upload your photos or videos - Direct Messages are fully supported - Open / Download photos and videos in full HD - Everything you can do normally on your phone on the Instagram mobile website (like, follow, comment, browse, ..) - Comfortable layout for a better experience This app requires only the minimal permissions required to work to improve your security. 📌 Important! Instagram™ is a trademark of Instagram Inc., registered in the U.S. and other countries. This is an independent project and has no relationship to Instagram™ or Instagram Inc. Save Story does not belong or related to the official Instagram application / website in any ways. It is an unofficial app that is developed and maintained independently. ⭐ Please, rate us! We work hard to provide you with the best experience for Instagram. If you like our extension, please provide us with a 5 star rating! If you have any questions, remarks or suggestions, we’d be happy to hear them! Please refer to our contact details below.

User reviews

Extension files

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs
8

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

No URLs found
No IP addresses found

8 indicators in this extension

8 indicators
5 versions analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe
Version
Size
Verdict
Findings
Permhash
1.8.3
Latest
0.78 MBNo malware found0
a171e9298b502b2975fbb5dc19394b15dd6e62bd89a5417246e9c903311b9bc0
1.8.2
0.78 MBNo malware found0
a171e9298b502b2975fbb5dc19394b15dd6e62bd89a5417246e9c903311b9bc0
1.8.1
0.78 MBNo malware found0
a171e9298b502b2975fbb5dc19394b15dd6e62bd89a5417246e9c903311b9bc0
1.5.0
0.13 MBNo malware found0
b06bd4cdc346e2ccf0557d7131059b054a328d50653674fe759d8f5809d2622b
1.4.0
0.12 MBNot scanned—
b06bd4cdc346e2ccf0557d7131059b054a328d50653674fe759d8f5809d2622b
1.3
0.10 MBNo malware found0
504e4019d9689fcae7650490ab66dece577b01f3bbe790cd1e73cb19fb52abad
1.2
0.09 MBCaution—
504e4019d9689fcae7650490ab66dece577b01f3bbe790cd1e73cb19fb52abad
1.1
0.09 MBCaution—
504e4019d9689fcae7650490ab66dece577b01f3bbe790cd1e73cb19fb52abad
1.0
0.06 MBCaution—
7d43211af9bec7d13b7c83596ada6ab0087a68012ace1e0ff24c05061b9d3e29
1.8.0
0.79 MBNot scanned—
a171e9298b502b2975fbb5dc19394b15dd6e62bd89a5417246e9c903311b9bc0
Showing 1 to 10 of 20 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Popular in Social Networking