Edge Add-ons
2Versions
0Code reviewed

Not reviewed

No code review on record

We have not reviewed this extension’s code, so we cannot vouch for it either way. Check the permissions below to decide whether it asks for more than it needs.

Want us to read this extension's code? Ask for a review and we'll queue it.

19 indicators in this extension

19 indicators
0 versions analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

What our analysis found

SP X-Ray is not yet reviewed by Extension Auditor. Its permissions mean it can inject scripts into pages. It was last updated in April 2026.

SP X-Ray

SP X-Ray Edge extension security report

ID: ijgobmjpeffjkfpnkhjcjknphipelpbd

Supported Languages

🇺🇸US English

Extension Info & Metadata

Status
Active
Version
2.5
Size
0.31 MB
Rating
0.0/5
Reviews
0
Users
9
Type
Extension
Updated
Apr 6, 2026
Category
Developer-tools
Price
Paid
Featured
No
Visibility
Listed
Mature
No
By Google
No
Trusted
No
This publisherTrack record
1extension
All still listed

Publisher Contextual Analysis

Author
SP X-Ray
Extensions
1
Active
1
Obsolete
0
Listed
1
Unlisted
0
Users
9

Screenshots & videos

Screenshot 1
Screenshot 2
Screenshot 3
Screenshot 4
Screenshot 5

Install growth

Item
Type
Severity
Description
scripting
Permission
Critical
This permission allows injection and execution of JavaScript on any webpage. Rated Critical because it can modify page content, steal sensitive data, and inject malicious code into any site the extension has access to.
identity
Permission
High
This permission accesses Chrome identity service and user information. Rated High because it can obtain OAuth tokens, access connected accounts, and impersonate the user in authenticated service.
activeTab
Permission
Medium
This permission grants temporary access to the current tab. Rated Medium because it can access current page content when invoked, though limited to user-initiated actions.
tabs
Permission
Medium
This permission enables tab management and monitoring. Rated Medium because it can track open tabs, access tab metadata, and monitor user browsing patterns.
storage
Permission
Medium
This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
https://*.sharepoint.com/*
Host
Medium
Host permission — access limited to this URL pattern.
https://graph.microsoft.com/*
Host
Medium
Host permission — access limited to this URL pattern.
https://login.microsoftonline.com/*
Host
Medium
Host permission — access limited to this URL pattern.
https://ipapi.co/*
Host
Medium
Host permission — access limited to this URL pattern.
https://api.counterapi.dev/*
Host
Medium
Host permission — access limited to this URL pattern.
sidePanel
Permission
Low
This permission adds custom panels to the browser interface. Rated Low because it only affects browser UI elements and cannot access page content.

19 indicators in this extension

19 indicators
0 versions analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

About this extension

Read-only SharePoint explorer in Chrome's side panel. Browse sites, lists, libraries, taxonomy. Run KQL searches - no setup needed.

Read the publisher’s full description

Explore the full structure of any SharePoint Online or On-Premises site directly from Chrome's side panel - using your existing browser session. No Azure AD app registration. No OAuth flow. No setup. ──────────────────────────────────────── 🌐 SITE EXPLORER ──────────────────────────────────────── Browse the complete site hierarchy: site collections, sub-sites, lists and document libraries, fields and columns, content types, items and files (lazy-loaded with folder navigation), site columns, features, users and security groups. ──────────────────────────────────────── 🔍 KQL SEARCH ──────────────────────────────────────── Run Keyword Query Language searches against the SharePoint search index. Results shown as cards with human-readable file sizes. Toggle raw JSON for debugging. Export all results to CSV across paginated result sets. Refiner panel: clickable facet chips for ContentClass, FileType, Author and SiteName let you AND-filter results instantly. ──────────────────────────────────────── 📋 CAML QUERY ──────────────────────────────────────── Build and run CAML queries against any list. Includes a list and scope selector, XML editor with syntax highlighting and live line numbers, 20 built-in presets, client-side XML validation, and a sticky-header results table. Generate ready-to-use code in C# CSOM, C# SSOM, React/TypeScript (PnPjs v3) and PowerShell. Export to CSV · toggle raw JSON · copy query or REST URL. ──────────────────────────────────────── 🛠 REST API TESTER ──────────────────────────────────────── Send GET and POST requests to any SharePoint REST endpoint. Choose Accept format (OData verbose, minimal metadata, JSON, XML), auto-inject X-RequestDigest for POST requests, and view syntax-highlighted responses. Session history keeps your last 20 requests. ──────────────────────────────────────── 🔗 URL INSPECTOR ──────────────────────────────────────── Paste any SharePoint URL to instantly decode its components - site, library, folder, file, list GUID and item ID. Includes an "Open in tree" button to navigate the explorer directly to the decoded location. ──────────────────────────────────────── 🏷 TAXONOMY BROWSER ──────────────────────────────────────── Browse the full term store hierarchy (Store - Groups - Sets - Terms) with lazy loading and a detail panel showing all term properties. ──────────────────────────────────────── ⚙️ MANAGED PROPERTIES ──────────────────────────────────────── Search and inspect managed properties in the SharePoint search schema. Resizable detail panel. Falls back to site columns if the search administration endpoint is unavailable. ──────────────────────────────────────── 📊 GOVERNANCE ──────────────────────────────────────── Four dashboards powered by Microsoft Graph - sign in once with your Microsoft 365 account: • Inactive Sites - tenant-wide usage report showing last activity, page views and storage per site • External Sharing - KQL-powered scan of externally shared documents with Graph sharing links and an anonymous-link chart across the tenant • Site Hygiene - ownerless Microsoft 365 groups, guest users, and cold or orphaned Entra accounts • Site Activity - hits, visits, storage quota, 30-day daily sparkline, and top users by file activity ──────────────────────────────────────── 🔐 PERMISSIONS ──────────────────────────────────────── • Permission Report - enumerate all unique permissions across lists, libraries and sub-sites. Filter by name, export to CSV. • User Access Scanner - enter any user's email or claims identity to see where they have access, at what level, and whether it is direct or via a group. ──────────────────────────────────────── 🗑 RECYCLE BIN ──────────────────────────────────────── Browse deleted items on any site, filter by name, export to CSV, restore with conflict resolution, permanently delete individual items, or empty the entire bin - without leaving the side panel. ──────────────────────────────────────── 💾 STORAGE EXPLORER ──────────────────────────────────────── See storage usage per list and library sorted by size. Site-level total, mini bar charts and CSV export. ──────────────────────────────────────── 📦 PROVISIONING ──────────────────────────────────────── Export and import SharePoint site structure as portable JSON templates. • Export - select lists, site columns, content types, folders and list items and download as a single JSON file • Import Wizard - five-step guided wizard (Upload - Target - Options - Dry run - Apply). A rich preview card shows source title, export date, list count, field count and per-list details before you commit. Idempotent - re-running on an existing site safely skips duplicates. ──────────────────────────────────────── 📁 COPY LIST ──────────────────────────────────────── Copy any list or library to another site collection or subsite - including fields, views and optionally list items. Triggered directly from the tree. ──────────────────────────────────────── 🏥 HEALTH CHECK ──────────────────────────────────────── 29 automated checks across four categories: • Search health - availability, crawl freshness, managed property coverage • Taxonomy health - empty groups, sets without terms, duplicate labels • Governance - storage quota, external sharing, admin count • Content & drift - empty lists, versioning disabled, large lists approaching the 5,000-item threshold, missing indexes, unsafe views Results shown with SVG status badges, color-coded rows, sticky category headers and callout-style remediation hints. ──────────────────────────────────────── ✨ MORE ──────────────────────────────────────── • Property inspector - click any node to see all raw API properties • File version history - version number, modified by, date, size and comments on any file • Sharing tab - role assignments and items with active sharing links on list and library nodes • Used in tab - see which lists and content types a field is used in • Health indicator dots on list/library nodes - at-a-glance signals for NoCrawl, versioning disabled and unique permissions • Hub site badges - hub sites and connected sites show a badge directly on the tree node • Query history - KQL and CAML queries saved automatically; re-run any previous query with one click • Reindex sites, webs and lists directly from the tree • Filter tree by label • Drag-to-resize dividers in all views • What's New button - always know what changed in the latest version • Three UI themes: Shadcn, Fluent UI, Material Design and Diablo - switchable in the header • Dark / light mode • Works on SharePoint Online (*.sharepoint.com) automatically; on-premises sites via one-click permission grant ──────────────────────────────────────── 🔒 PRIVACY ──────────────────────────────────────── SP X-Ray reads data from SharePoint using your existing browser session. No data is sent to any external server. All processing happens locally in your browser.

User reviews

Extension files

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.

URLs
17
IPv4
2

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

No URLs found
No IP addresses found

19 indicators in this extension

19 indicators
0 versions analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe
Version
Size
Verdict
Findings
Permhash
2.4
Latest
1.76 MBNot scanned—
013bcebc060fc824a5d16b9594f02bfec7e288ececd93d9cb7db2c1fc61acbb4
2.5
0.31 MBNot scanned—
013bcebc060fc824a5d16b9594f02bfec7e288ececd93d9cb7db2c1fc61acbb4
Showing 1 to 2 of 10 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

Gain full insight into all external connections.

Upgrade for full visibility.