Chrome Web Store
71Versions
1Code reviewed

Caution required

Suspicious in code review (v3.2.0)

Our reviewer found behaviour consistent with malware in version 3.2.0, but not enough to confirm it. Treat this extension as untrusted until it has been re-reviewed.

What our analysis found

Sky Follower Bridge, used by 100,000 people, is rated caution by Extension Auditor. Our code review reported 1 finding (1 high), led by other. It comes from a trusted publisher and was last updated in September 2026.

Key findings

  • High

    Other

    The bundled manifest requests the 'identity' permission, but the published CWS manifest summary lists only 'storage'. This mismatch may mislead users about the actual permissions requested.

Analyst notes

The bundled manifest includes the 'identity' permission, which is not disclosed in the published CWS manifest summary. This discrepancy is suspicious, though the permission is plausibly needed for OAuth with Bluesky. The extension's description and reviews suggest legitimate functionality, but the missing JS source code prevents a full assessment.

Sky Follower Bridge

Sky Follower Bridge Chrome extension security report

ID: behhbpbpmailcnfbjagknjngnfdojpko

Supported Languages

🇧🇷Brazilian Portuguese
🇨🇳Chinese (Simplified)
🇺🇸English
🇫🇷French
🇩🇪German
🇮🇹Italian
🇯🇵Japanese
🇰🇷Korean
🇵🇹Portuguese
🇪🇸Spanish

Extension Info & Metadata

Status
Active
Version
3.2.2
Size
0.74 MB
Rating
4.1/5
Reviews
365
Users
100,000
Type
Extension
Updated
Sep 21, 2026
Category
Workflow & planning
Price
Free
Featured
Yes
Visibility
Listed
Mature
No
By Google
No
Trusted
Yes
This publisherTrack record
1extension
All still listed

Publisher Contextual Analysis

Trusted
Author
sky-follower-bridge.dev
MX records exist
Yes
Domain exists
Yes
Is disposable
No
Is role-based
No
Mailbox exists
Yes
Website
Visit
Extensions
1
Active
1
Obsolete
0
Listed
1
Unlisted
0
Users
100,000

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Screenshots & videos

Screenshot 2
Screenshot 3

Install growth

Item
Type
Severity
Description
identity
Permission
High
This permission accesses Chrome identity service and user information. Rated High because it can obtain OAuth tokens, access connected accounts, and impersonate the user in authenticated service.
Contextual Risk Factors
Risk Factor
High
The following context increases the overall risk: • 19% increase: Access to sensitive domains increases potential impact
storage
Permission
Medium
This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
https://server.sky-follower-bridge.dev/*
Host
Medium
Host permission — access limited to this URL pattern.
https://bsky.social/*
Host
Medium
Host permission — access limited to this URL pattern.
https://*.bsky.network/*
Host
Medium
Host permission — access limited to this URL pattern.
https://*.host.bsky.network/*
Host
Medium
Host permission — access limited to this URL pattern.
https://twitter.com/*
Host
Medium
Host permission — access limited to this URL pattern.
https://x.com/*
Host
Medium
Host permission — access limited to this URL pattern.
https://www.threads.net/*
Host
Medium
Host permission — access limited to this URL pattern.
https://www.threads.com/*
Host
Medium
Host permission — access limited to this URL pattern.
https://www.instagram.com/*
Host
Medium
Host permission — access limited to this URL pattern.
https://www.tiktok.com/*
Host
Medium
Host permission — access limited to this URL pattern.
https://www.facebook.com/*
Host
Medium
Host permission — access limited to this URL pattern.
Access to Sensitive Domains
Risk Factor
Medium
This extension requests access to sensitive domains: https://server.sky-follower-bridge.dev/*, https://twitter.com/*, https://www.instagram.com/*, https://www.facebook.com/*

About this extension

Easily transfer your following users and list members from X to Bluesky.

Read the publisher’s full description

📝 Documentation https://www.sky-follower-bridge.dev 🔎 Supported Social Networks - 𝕏 - Threads - Instagram - TikTok - Facebook 🚀 How to use 1. Open your target page. - Twitter Follower ( https://x.com/following ) - Follow( https://x.com/followers ) - Block(https://twitter.com/settings/blocked/all) - List members page - Threads follower tab (https://www.threads.net/) - Instagram follower dialog (https://www.instagram.com/your_account/following) 2. Press "Alt + B" shortcut or click on the toolbar icon to launch the Sky Follower Bridge. 3. Input your Bluesky login email or handle and app password( https://bsky.app/settings/app-passwords ) 4. Press the Finding Bluesky Users btn. 5. The modal will open and detect Bluesky users. 6. The `View Detected users` will be displayed once the scan is complete. 7. Press the button to check the results, and then click the Follow button. 🔧 Troubleshooting - Please feel free to mention @sky-follower-bridge.dev on Bluesky. They will provide support to ensure the tool is functioning properly. ( https://bsky.app/profile/sky-follower-bridge.dev ) - The main solutions for errors are posted on this site. https://www.sky-follower-bridge.dev/troubleshooting.html 🚨 Limitations User search may fail due to late limit in Bluesky's API. In this case, please wait for 2 to 3 minutes and execute the search again.

User reviews

Extension files

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

No network indicators were extracted from this version.

Version
Size
Verdict
Findings
Permhash
3.2.2
Latest
0.74 MBNot scanned—
be29d32bd167887f4580770b7d3f6229077defe45e36b04936c00f36657746d9
3.2.0
0.73 MBCaution0
be29d32bd167887f4580770b7d3f6229077defe45e36b04936c00f36657746d9
3.1.0
0.69 MBNot scanned—
be29d32bd167887f4580770b7d3f6229077defe45e36b04936c00f36657746d9
3.0.0
0.73 MBNot scanned—
be29d32bd167887f4580770b7d3f6229077defe45e36b04936c00f36657746d9
2.9.3
0.61 MBNot scanned—
49a25f9feefaffecad0fcd30c50dc9331cff8b55ece53def6285c09e17e6f5d7
2.9.0
0.61 MBNot scanned—
49a25f9feefaffecad0fcd30c50dc9331cff8b55ece53def6285c09e17e6f5d7
2.8.4
0.61 MBNot scanned—
49a25f9feefaffecad0fcd30c50dc9331cff8b55ece53def6285c09e17e6f5d7
2.8.3
0.61 MBNot scanned—
49a25f9feefaffecad0fcd30c50dc9331cff8b55ece53def6285c09e17e6f5d7
2.8.1
0.61 MBNot scanned—
49a25f9feefaffecad0fcd30c50dc9331cff8b55ece53def6285c09e17e6f5d7
2.8.0
0.61 MBNot scanned—
49a25f9feefaffecad0fcd30c50dc9331cff8b55ece53def6285c09e17e6f5d7
Showing 1 to 10 of 80 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.