Chrome Web StoreNo malware found
In code review (v0.5.4)
Our reviewer read version 0.5.4 — the most recent version we have reviewed — and found no malicious behaviour. The version shown here has not been individually reviewed yet.
3 indicators in this extension
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
What our analysis found
Super Carl - browser use showed no malicious code in Extension Auditor's review. Its permissions mean it can inject scripts into pages. It comes from a trusted publisher and was last updated in July 2026.
Analyst notes
The extension is a legitimate AI browser-automation assistant that collects LinkedIn,, and Instagram authentication cookies and localStorage snapshots, then sends them via chrome.tabs.sendMessage exclusively to the publisher's own domain ([domain withheld]). All collected data categories — authentication tokens, profile identity, and web storage — are disclosed under the CWS 'Authentication information' and 'Personally identifiable information' entries; the destination is unambiguously first-party. Every capability is gated behind explicit user opt-in: a popup toggle, per-domain optional host permission grants, and a dedicated site-access UI. The ML signal for js_fromcharcode originates in arrayBufferToBase64() (converting LinkedIn profile avatars to data URLs), not obfuscation; innerHTML hits are limited to clearing the popup avatar container before appending a sanitised img element; and scripting.executeScript targets only user-approved social-media tabs within the extension's stated browser-automation purpose.
Super Carl - browser use Chrome extension security report
ID: acbadiebgbpdelibphegpcejmhleiloa
Supported Languages
Extension Info & Metadata
Publisher Contextual Analysis
- Author
- Super Carl Inc.
- Privacy
- Privacy Policy
- Help
- Help Center
- MX records exist
- Yes
- Domain exists
- Yes
- Is disposable
- No
- Is role-based
- Yes
- Mailbox exists
- Yes
You reached today's free scan limit (3/3 unique extensions).
Upgrade for full visibility.
Screenshots & videos
Install growth
3 indicators in this extension
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
About this extension
Enable Super Carl AI to operate browser tasks on domains you choose
Read the publisher’s full description
Tell Carl who you need to find. Carl reasons across 1 billion+ profiles, maps the warmest path through your own network, and drafts the outreach for you to approve and send. No warm path? Carl surfaces a direct email so you can still reach them.
User reviews
Extension files
Browse and explore files within this extension package
You reached today's free scan limit (3/3 unique extensions).
Upgrade for full visibility.
URLs
View the external URLs this extension communicates with to understand its network activity and data interactions.
3 indicators in this extension
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
Code Diff
Compare extension code between any two versions.
0 changed files detected
No comparable text files found between these versions.
You reached today's free scan limit (3/3 unique extensions).
Upgrade for full visibility.
Related extensions
Popular in Communication
- Cisco Webex Extension10,078,689 users
- Ping That Wallet4,000,000 users
- DeepL: translate and write with AI4,000,000 users
- Cisco Webex Extension2,671,107 users
- Connecteur Antidote1,000,000 users