Extension Auditor
Extension Auditor
Sign Up
Shape AI

Shape AI

ID: nciahpicomdolcicjejonlmlbmpfifgo

Supported Languages

🇺🇸US English

Extension Info & Metadata

Status
Removed
Version
1.0.11
Size
0.75 MB
Rating
5.0/5
Reviews
1
Users
16
Type
Extension
Updated
Sep 6, 2024
Category
Productivity Tools
Price
Free
Featured
No
Visibility
Listed
Mature
No
By Google
No
Trusted
No
Download CRX
Chrome Web Store
Report Issue

Publisher Contextual Analysis

Author
shape-ai-v1View Profile
Privacy
Privacy Policy
MX records exist
Yes
Domain exists
Yes
Is disposable
No
Is role-based
No
Mailbox exists
Yes
Total Extensions
1
Active
0
Obsolete
1
Listed
1
Unlisted
0
Total Users
16
Screenshot 1

Shape AI enhances software productivity with intelligent tooltips and workflow automation. It offers a no-code platform to build,…

Shape AI enhances software productivity with intelligent tooltips and workflow automation. It offers a no-code platform to build, test, and deploy AI features quickly, integrating capabilities such as click steps, screen reading, and data enrichment. Shape AI aims to boost user engagement and productivity through custom AI agent features that provide real-time assistance. The platform is designed for seamless integration and quick deployment, allowing businesses to create branded AI experiences that drive user growth and efficiency. For more details, visit tryshape.ai

Item
Type
Severity
Description
scripting
Permission
Critical
This permission allows injection and execution of JavaScript on any webpage. Rated Critical because it can modify page content, steal sensitive data, and inject malicious code into any site the extension has access to.
webRequest
Permission
Critical
This permission enables the extension to monitor and analyze all web requests made by the browser. Rated Critical because it can observe all network traffic including sensitive data, track browsing behavior, and gather authentication tokens.
debugger
Permission
Critical
This permission grants the extension ability to debug and control other extensions and browser tabs. Rated Critical because it can access and modify other extensions' internal state, inject code, and access sensitive data from any tab.
identity
Permission
High
This permission accesses Chrome identity service and user information. Rated High because it can obtain OAuth tokens, access connected accounts, and impersonate the user in authenticated service.
webNavigation
Permission
High
This permission enables monitoring of all browser navigation events and transitions. Rated High because it can track every page visit, navigation method, and browsing pattern, potentially exposing sensitive browsing behavior and user activities.
Contextual Risk Factors
Risk Factor
High
The following context increases the overall risk:• 20% increase: Access to sensitive domains increases potential impact
tabs
Permission
Medium
This permission enables tab management and monitoring. Rated Medium because it can track open tabs, access tab metadata, and monitor user browsing patterns.
activeTab
Permission
Medium
This permission grants temporary access to the current tab. Rated Medium because it can access current page content when invoked, though limited to user-initiated actions.
storage
Permission
Medium
This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
http://localhost:9999/
Host
Medium
Host permission — access limited to this URL pattern.
http://18.191.167.159:5000/*
Host
Medium
Host permission — access limited to this URL pattern.
https://d3c8hgxz80pwq4.cloudfront.net/*
Host
Medium
Host permission — access limited to this URL pattern.
https://s3.eu-central-1.amazonaws.com/*
Host
Medium
Host permission — access limited to this URL pattern.
Access to Sensitive Domains
Risk Factor
Medium
This extension requests access to sensitive domains: https://s3.eu-central-1.amazonaws.com/*
sidePanel
Permission
Low
This permission adds custom panels to the browser interface. Rated Low because it only affects browser UI elements and cannot access page content.
URLs
34
IPv4
5
IPv6
0

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

Gain full insight into all external connections.

Upgrade for full visibility.

Sign In
clients2.google.com/service/update2/crxhttps://clients2.google.com/service/update2/crx
accounts.google.com/*https://accounts.google.com/*
*/*http://*/*
*/*https://*/*
localhost-http://localhost:9999/
18.191.167.159/*http://18.191.167.159:5000/*
d3c8hgxz80pwq4.cloudfront.net/*https://d3c8hgxz80pwq4.cloudfront.net/*
s3.eu-central-1.amazonaws.com/*https://s3.eu-central-1.amazonaws.com/*
d3c8hgxz80pwq4.cloudfront.net-https://d3c8hgxz80pwq4.cloudfront.net
www.w3.org/2000/svghttp://www.w3.org/2000/svg
Showing 1 to 10 of 40 rows
Rows per page:

Gain full insight into all external connections.

Upgrade for full visibility.

Sign In
18.191.167.159
IPv4
-
1.5.75.75
IPv4
-
221.114.246.32
IPv4
-
1.208.38.252
IPv4
-
1.32.34.63
IPv4
-
Showing 1 to 6 of 10 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files (scanned top 25 shared text files)

No comparable text files found between these versions.

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.

Sign In