Edge Add-ons
1Versions
0Code reviewed

Not reviewed

No code review on record

We have not reviewed this extension’s code, so we cannot vouch for it either way. Check the permissions below to decide whether it asks for more than it needs.

Want us to read this extension's code? Ask for a review and we'll queue it.

3 indicators in this extension

3 indicators
0 versions analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

What our analysis found

WebRAG is not yet reviewed by Extension Auditor. Its permissions mean it can read and change data on all websites and can inject scripts into pages. It comes from a publisher with 9 extensions and was last updated in January 2026.

WebRAG

WebRAG Edge extension security report

ID: mmmhcbgbjpakpamokhmkdhoaahmpkpif

Supported Languages

🇺🇸US English

Extension Info & Metadata

Status
Active
Version
1.0
Size
0.07 MB
Rating
0.0/5
Reviews
0
Users
5
Type
Extension
Updated
Jan 8, 2026
Category
Search-tools
Price
Paid
Featured
No
Visibility
Listed
Mature
No
By Google
No
Trusted
No
This publisherTrack record
9extensions
All still listed

Publisher Contextual Analysis

Author
hummingg
Extensions
9
Active
9
Obsolete
0
Listed
9
Unlisted
0
Users
517

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Install growth

Item
Type
Severity
Description
scripting
Permission
Critical
This permission allows injection and execution of JavaScript on any webpage. Rated Critical because it can modify page content, steal sensitive data, and inject malicious code into any site the extension has access to.
<all_urls>
Host
Critical
Broad host access — the extension can read/modify content on every website.
Contextual Risk Factors
Risk Factor
High
The following context increases the overall risk:• 25% increase: Unsafe code evaluation capabilities increase attack surface
Broad Host Permissions
Risk Factor
High
This extension has broad host permissions allowing it to access many or all websites.
Broad Content Script Access
Risk Factor
High
This extension can inject scripts into any website.
Unsafe WebAssembly Execution
Risk Factor
High
This extension's CSP allows "wasm-unsafe-eval".
activeTab
Permission
Medium
This permission grants temporary access to the current tab. Rated Medium because it can access current page content when invoked, though limited to user-initiated actions.
storage
Permission
Medium
This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
contextMenus
Permission
Low
This permission adds items to browser context menus. Rated Medium because it only modifies right-click menus without access to page content.
sidePanel
Permission
Low
This permission adds custom panels to the browser interface. Rated Low because it only affects browser UI elements and cannot access page content.

3 indicators in this extension

3 indicators
0 versions analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

About this extension

网页知识库助手 - Local RAG-powered knowledge base from web pages

Read the publisher’s full description

# WebRAG - 网页知识库助手 A browser extension that builds a local RAG (Retrieval-Augmented Generation) knowledge base from web pages, powered by Ollama for complete privacy and local processing. ## Features - 📚 Build personal knowledge base from web pages - 🌐 Batch import links with search and filtering - 🔍 Semantic search powered by deep learning embeddings - 💬 AI-powered Q&A with Markdown support - 🔒 100% local processing - your data stays private - 📦 Multiple knowledge bases management - 🇨🇳 Excellent Chinese language support ## Quick Start ### Installation 1. Open Edge and navigate to `edge://extensions` 2. Enable "Developer mode" (toggle in top right) 3. Click "Load unpacked" and select the `rag-extension` folder 4. Pin the extension to your toolbar ### Ollama Setup **Important:** Ollama must be configured for CORS to work with browser extensions. Start Ollama with CORS enabled: ```bash # macOS/Linux OLLAMA_ORIGINS="*" ollama serve ``` Download required models: ```bash # Chat model (required) ollama pull qwen2.5:7b # Embedding model (required for Chinese) ollama pull lrs33/bce-embedding-base_v1 ``` ## Usage ### 1. Add Current Page Click "Add Current Page" to save the current webpage to your knowledge base. ### 2. Batch Add Links Click "Add Page Links" to batch import multiple pages: - Extracts all links from current page - Search and filter links - Select multiple pages to add ### 3. Search Knowledge Base Enter your question and click "Search" to find relevant content using semantic search. ### 4. AI Q&A Click "AI Answer" to get intelligent responses based on your knowledge base. Responses support full Markdown formatting including code blocks, tables, and lists. ## Configuration Open the extension and scroll to "LLM Config" section: - **Chat Model**: Select your installed model (e.g., `qwen2.5:7b`) - **Embedding Model**: Select Chinese-optimized model (e.g., `lrs33/bce-embedding-base_v1`) The extension automatically loads available models from Ollama. ## Technical Stack | Component | Technology | |-----------|------------| | **Frontend** | Vanilla JavaScript + Extension API | | **Embedding** | Ollama Embeddings API (supports Chinese) | | **Vector Store** | IndexedDB (browser local storage) | | **LLM** | Ollama (local inference) | | **Markdown** | marked.js | | **Similarity** | Cosine similarity | ## Recommended Models ### For Chinese Content - **Chat**: `qwen2.5:7b`, `qwen:14b`, `yi:34b` - **Embedding**: `lrs33/bce-embedding-base_v1`, `bge-large-zh-v1.5` ### For English Content - **Chat**: `llama3.2`, `mistral`, `phi3` - **Embedding**: `nomic-embed-text`, `mxbai-embed-large` ## Data Privacy ✅ **100% Local Processing** - All data stored in browser IndexedDB - AI inference runs on your local Ollama - No data sent to external servers - Complete privacy and security

User reviews

Extension files

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs
3

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

No URLs found
No IP addresses found

3 indicators in this extension

3 indicators
0 versions analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe
Version
Size
Verdict
Findings
Permhash
1.0
Latest
0.07 MBNot scanned—
883a2d96610c125aa5825f1066f890362bd605ebf8749784eb12c4be30b5951f
Showing 1 to 1 of 10 rows
Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.