Edge Add-ons
1Versions
0Code reviewed

Not reviewed

No code review on record

We have not reviewed this extension’s code, so we cannot vouch for it either way. Check the permissions below to decide whether it asks for more than it needs.

Want us to read this extension's code? Ask for a review and we'll queue it.

1 indicator

1 indicator
0 versions analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

What our analysis found

堆塔思维-WebTick, used by 1,105 people, is not yet reviewed by Extension Auditor. Its permissions mean it can read and change data on all websites. It comes from a publisher with 2 extensions and was last updated in June 2020.

堆塔思维-WebTick

堆塔思维-WebTick Edge extension security report

ID: cjcjppchhkbcgdkodhjbaecpneenbmif

Supported Languages

🇨🇳Chinese (Simplified)
🇺🇸US English

Extension Info & Metadata

Status
Active
Version
1.2.0
Size
0.62 MB
Rating
4.0/5
Reviews
4
Users
1,105
Type
Extension
Updated
Jun 12, 2020
Category
Productivity
Price
Paid
Featured
No
Visibility
Listed
Mature
No
By Google
No
Trusted
No
This publisherTrack record
2extensions
All still listed

Publisher Contextual Analysis

Author
北京堆塔科技有限公司
Website
Visit
Extensions
2
Active
2
Obsolete
0
Listed
2
Unlisted
0
Users
1,224

Screenshots & videos

Screenshot 1

Install growth

Item
Type
Severity
Description
<all_urls>
Host
Critical
Broad host access — the extension can read/modify content on every website.
Contextual Risk Factors
Risk Factor
High
The following context increases the overall risk:• 10% increase: Early script execution enables pre-emptive content manipulation• 15% increase: Older manifest version lacks modern security controls
Broad Host Permissions
Risk Factor
High
This extension has broad host permissions allowing it to access many or all websites.
Broad Content Script Access
Risk Factor
High
This extension can inject scripts into any website.
tabs
Permission
Medium
This permission enables tab management and monitoring. Rated Medium because it can track open tabs, access tab metadata, and monitor user browsing patterns.
storage
Permission
Medium
This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
activeTab
Permission
Medium
This permission grants temporary access to the current tab. Rated Medium because it can access current page content when invoked, though limited to user-initiated actions.
unlimitedStorage
Permission
Medium
This permission removes storage quota restrictions. Rated Medium because it can store large amounts of user data without limits, potentially impacting browser performance and storing extensive tracking data.
Early Content Script Execution
Risk Factor
Medium
This extension runs content scripts at document_start.
Older Manifest Version
Risk Factor
Medium
This extension uses Manifest Version 2

1 indicator

1 indicator
0 versions analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

About this extension

duita-mind WebTick

Read the publisher’s full description

The main function Including text annotations, area screenshots, in-page snippets and entire article extraction functions. Text annotation: record the knowledge content in the web in the form of text highlighting, and can add titles and notes. This function provides six highlight colors, and its purpose mainly corresponds to the six-color fluorescent note method. Area screenshot: Select the target area through the provided pull-box tool to obtain a screenshot, and add a title and notes to the screenshot. In-page fragment: For a certain area in a web page, according to its page layout structure, you can select the area by moving the mouse and clicking to obtain the content of the area. Entire article: According to the content layout of the page, get the main article content. This function may fail. If it fails, you can get the content through the on-page fragment. Edit preview: In addition to highlighting the notes directly on the page, all other content is provided with a preview function. You can perform preliminary editing, such as deleting unnecessary content parts. View History: This function is only effective for highlighted notes. After clicking, if you have marked notes on this page and the historical data has not been cleared, your marked history will be displayed. Clear historical data: Heap Tower-WebTick data is stored in the database of your local browser and simultaneously synchronized to the Heta Mind web notes, so there are actually two copies of the data. You can clear the browser data as needed.

User reviews

Extension files

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.

URLs
1

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

No URLs found
No IP addresses found

1 indicator

1 indicator
0 versions analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe
Version
Size
Verdict
Findings
Permhash
1.2.0
Latest
0.62 MBNot scanned—
41a7a88ea3737d16607f7fd77f37e07cb68f4ebfe20527e8e31111e2c90bbc4c
Showing 1 to 1 of 10 rows
Rows per page:

Gain full insight into all external connections.

Upgrade for full visibility.

More from 北京堆塔科技有限公司

Popular in Productivity