Extension Auditor
Sign Up
Edge Add-ons
3Versions
0Code reviewed

Not reviewed

No code review on record

We have not reviewed this extension’s code, so we cannot vouch for it either way. Check the permissions below to decide whether it asks for more than it needs.

Want us to read this extension's code? Ask for a review and we'll queue it.

What our analysis found

WebRunner Companion - Private is not yet reviewed by Extension Auditor. Its permissions mean it can read and change data on all websites and can inject scripts into pages. It comes from a trusted publisher and was last updated in June 2026.

WebRunner Companion - Private

WebRunner Companion - Private Edge extension security report

ID: gihjjdmbkemajimmelibhhlgonbofnpb

Supported Languages

🇺🇸US English

Extension Info & Metadata

Status
Active
Version
1.0.277.1
Size
0.99 MB
Rating
0.0/5
Reviews
0
Users
10
Type
Extension
Updated
Jun 30, 2026
Category
Developer-tools
Price
Paid
Featured
No
Visibility
Listed
Mature
No
By Google
No
Trusted
No
Download CRX
Edge Add-ons
Report Issue
This publisherTrack record
877extensions
41 no longer listed

Publisher Contextual Analysis

Trusted
Author
Microsoft Corporation
Privacy
Privacy Policy
Country
US
MX records exist
Yes
Domain exists
Yes
Is disposable
No
Is role-based
No
Mailbox exists
Yes
Address
One Microsoft Way Redmond, WA 98052 US
Website
Visit
Extensions
877
Active
820
Obsolete
41
Listed
859
Unlisted
18
Users
1,163,809,589

Install growth

Item
Type
Severity
Description
scripting
Permission
Critical
This permission allows injection and execution of JavaScript on any webpage. Rated Critical because it can modify page content, steal sensitive data, and inject malicious code into any site the extension has access to.
<all_urls>
Host
Critical
Broad host access — the extension can read/modify content on every website.
desktopCapture
Permission
High
This permission captures content from your desktop screens. Rated High because it can record sensitive information from any window, capture passwords, and monitor user activity.
offscreen
Permission
High
This permission creates hidden browser documents with full DOM access. Rated High because it can run background operations invisibly, potentially executing malicious code without user awareness.
webNavigation
Permission
High
This permission enables monitoring of all browser navigation events and transitions. Rated High because it can track every page visit, navigation method, and browsing pattern, potentially exposing sensitive browsing behavior and user activities.
Contextual Risk Factors
Risk Factor
High
The following context increases the overall risk:• 10% increase: About:blank access enables potential sandbox escape vectors
Broad Host Permissions
Risk Factor
High
This extension has broad host permissions allowing it to access many or all websites.
Broad Content Script Access
Risk Factor
High
This extension can inject scripts into any website.
activeTab
Permission
Medium
This permission grants temporary access to the current tab. Rated Medium because it can access current page content when invoked, though limited to user-initiated actions.
tabs
Permission
Medium
This permission enables tab management and monitoring. Rated Medium because it can track open tabs, access tab metadata, and monitor user browsing patterns.
storage
Permission
Medium
This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
unlimitedStorage
Permission
Medium
This permission removes storage quota restrictions. Rated Medium because it can store large amounts of user data without limits, potentially impacting browser performance and storing extensive tracking data.
https://dev.azure.com/*
Host
Medium
Host permission — access limited to this URL pattern.
https://*.visualstudio.com/*
Host
Medium
Host permission — access limited to this URL pattern.
About:blank Access
Risk Factor
Medium
This extension can run content scripts in about:blank pages.
system.display
Permission
Low
This permission reads display configuration. Rated Low because it only accesses screen properties without content access.
alarms
Permission
Low
This permission schedules periodic tasks. Rated Low because it can only trigger events at specified times without access to sensitive data.

Gain full insight into all external connections.

Upgrade for full visibility.

Sign In

About this extension

Data collection support for Azure DevOps Web Test Runner

Read the publisher’s full description

Azure DevOps Web Runner Companion provides a seamless way to document and manage test evidence when executing tests using the Azure Test Plans Web Runner. This companion tool allows you to capture screenshots of your browser tab or full desktop, record videos of your test session with optional audio, and automatically log user actions such as clicks and page navigation. All these captured artifacts are directly attached to your test results, ensuring that every detail is documented and traceable within Azure Test Plans. Evidence capture Take tab or full-desktop screenshots and annotate them with shapes, arrows, and text. Record screen videos with optional audio. Automatically capture user actions (clicks, keyboard input, and page navigation) as an image action log with embedded screenshots. Attach to test results All captured data uploads directly to the correct test run, test result, test iteration, and test step in Azure DevOps. Screenshots upload as PNG, videos as WebM, and action logs as self-contained HTML reports, all linked for end-to-end traceability. Sign in & connect Authenticate to Azure DevOps with a single click. The companion detects your signed-in Azure DevOps tab, acquires a session token, and handles all API communication securely using bearer token authentication. Supports multiple Azure DevOps organizations with automatic tab matching. Quick start Install the Web Runner Companion extension. Open the extension popup and connect to your Azure DevOps organization. Run tests from Azure DevOps web runner; the companion handles screenshot capture, screen recording, and image action logging automatically. Prerequisites Use Microsoft Edge or Google Chrome, version 138 or later. And sign in to Azure DevOps (Services or Server) in your browser. Web Runner Companion or Test & Feedback Extension Web Runner Companion: Lightweight, purpose-built for Azure DevOps web runner data capture only. Test & Feedback extension: Full exploratory testing suite with standalone mode, connected mode, bug/task creation UI, timeline, and session management. More on the Test & Feedback extension here: https://marketplace.visualstudio.com/items?itemName=ms.vss-exploratorytesting-web Running Manual Tests in Azure Test Plans To learn more about how to run manual tests in Azure Test Plans, read: https://docs.microsoft.com/en-us/azure/devops/test/run-manual-tests?view=azure-devops

User reviews

Extension files

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.

Sign In
URLs
60

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

No URLs found
No IP addresses found

Gain full insight into all external connections.

Upgrade for full visibility.

Sign In
Version
Size
Verdict
Findings
Permhash
1.0.275.1
Latest
0.99 MBNot scanned—
801fbfd6758fff137b42eeea9ea8bd5b3bde962a1d0167ea37648dd164745dc3
1.0.277.1
0.99 MBNot scanned—
801fbfd6758fff137b42eeea9ea8bd5b3bde962a1d0167ea37648dd164745dc3
1.0.276.2
0.99 MBNot scanned—
801fbfd6758fff137b42eeea9ea8bd5b3bde962a1d0167ea37648dd164745dc3
Showing 1 to 3 of 10 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

Gain full insight into all external connections.

Upgrade for full visibility.

Sign In