Chrome Web Store
14Versions
0Code reviewed

Not reviewed

No code review on record

We have not reviewed this extension’s code, so we cannot vouch for it either way. Check the permissions below to decide whether it asks for more than it needs.

Want us to read this extension's code? Ask for a review and we'll queue it.

55 indicators in this extension

55 indicators
0 versions analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

What our analysis found

WhatsApp Widget & Shared Inbox by SyncMate, used by 1,000 people, is not yet reviewed by Extension Auditor. Its permissions mean it can read and change data on all websites and can inject scripts into pages. It comes from a trusted publisher and was last updated in September 2026.

WhatsApp Widget & Shared Inbox by SyncMate

WhatsApp Widget & Shared Inbox by SyncMate Chrome extension security report

ID: bbdfkgfhagcepeohhodohfoiecfcnibk

Supported Languages

🇺🇸English

Extension Info & Metadata

Status
Active
Version
2.0.1
Size
2.43 MB
Rating
5.0/5
Reviews
5
Users
1,000
Type
Extension
Updated
Sep 10, 2026
Category
Communication
Price
Paid
Featured
Yes
Visibility
Listed
Mature
No
By Google
No
Trusted
Yes
This publisherTrack record
2extensions
All still listed

Publisher Contextual Analysis

Trusted
Author
assistro.co
MX records exist
Yes
Domain exists
Yes
Is disposable
No
Is role-based
No
Mailbox exists
Yes
Website
Visit
Extensions
2
Active
2
Obsolete
0
Listed
2
Unlisted
0
Users
1,113

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Screenshots & videos

Screenshot 1
Screenshot 2
Screenshot 3
Screenshot 4

Install growth

Item
Type
Severity
Description
scripting
Permission
Critical
This permission allows injection and execution of JavaScript on any webpage. Rated Critical because it can modify page content, steal sensitive data, and inject malicious code into any site the extension has access to.
<all_urls>
Host
Critical
Broad host access — the extension can read/modify content on every website.
Contextual Risk Factors
Risk Factor
High
The following context increases the overall risk:• 10% increase: Early script execution enables pre-emptive content manipulation
Broad Host Permissions
Risk Factor
High
This extension has broad host permissions allowing it to access many or all websites.
Broad Content Script Access
Risk Factor
High
This extension can inject scripts into any website.
activeTab
Permission
Medium
This permission grants temporary access to the current tab. Rated Medium because it can access current page content when invoked, though limited to user-initiated actions.
storage
Permission
Medium
This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
tabs
Permission
Medium
This permission enables tab management and monitoring. Rated Medium because it can track open tabs, access tab metadata, and monitor user browsing patterns.
https://web.whatsapp.com/*
Host
Medium
Host permission — access limited to this URL pattern.
https://app.assistro.co/*
Host
Medium
Host permission — access limited to this URL pattern.
https://dev.app.assistro.co/*
Host
Medium
Host permission — access limited to this URL pattern.
Early Content Script Execution
Risk Factor
Medium
This extension runs content scripts at document_start.
alarms
Permission
Low
This permission schedules periodic tasks. Rated Low because it can only trigger events at specified times without access to sensitive data.
notifications
Permission
Low
This permission displays system notifications. Rated Low because it can only show user-visible notifications without accessing system data.

55 indicators in this extension

55 indicators
0 versions analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

About this extension

Send WhatsApp messages from any webpage. Shared inbox for teams.

Read the publisher’s full description

Supercharge your team's communication with SyncMate, the ultimate WhatsApp integration tool for modern businesses. SyncMate seamlessly embeds WhatsApp directly into the tools you already use—ClickUp, Monday.com, and HubSpot—saving you hours of tab-switching and manual copy-pasting. Whether you're managing customer support tickets, coordinating sales deals, or tracking project milestones, SyncMate puts the conversation exactly where the context lives. Stop manually syncing messages and let your CRM act as your ultimate communication hub! SyncMate is built on 3 incredibly powerful, independent pillars: 🌟 PILLAR 1: Deep CRM Integrations Bring WhatsApp directly into your workflow. You no longer need your phone or even a WhatsApp Web tab open to talk to your clients. With a simple integration token, SyncMate embeds a full-featured WhatsApp widget directly inside your CRM's interface. - ClickUp Syncing: Send and receive WhatsApp messages directly from your - ClickUp Tasks and Lists. Link active client chats to specific tasks so your developers and project managers always have the latest context. - Monday.com Syncing: Link conversations to your Monday boards and items instantly. Never lose track of a client approval or update again. - HubSpot Syncing: Maintain perfect client communication logs right from your HubSpot contacts and deals. Sales reps can close deals faster without breaking their CRM workflow. - Contextual Awareness: SyncMate automatically reads the CRM context IDs to ensure messages are routed to the exactly correct task or deal. 👥 PILLAR 2: Team Shared Inbox Are you tired of fighting over a single WhatsApp Web tab? Or passing a company phone around the office? SyncMate’s powerful Shared Inbox allows your entire organization to use a single WhatsApp number securely and simultaneously. - Role-Based Access Control: An Administrator logs into WhatsApp Web once. They then instantly generate secure Bearer Tokens to share the connection with remote team members located anywhere in the world. - Chat Assignments: Avoid embarrassing double-replies. Claim and assign specific chats to individual team members so everyone knows who is handling which customer. - Private Internal Notes: Need to ask a colleague a question about a client's request? Leave a yellow, private internal note directly inside the chat thread. Your team sees it; the customer never does. - Real-Time Synchronization: Message statuses, typing indicators, read receipts, and reactions sync instantly across all team members' screens in real-time, backed by our lightning-fast WebSocket architecture. - Global Presence: Remote workers don't need a QR code or their own WhatsApp account. They securely piggback off the Admin's verified connection. ⚡ PILLAR 3: Smart Detection Widget A completely free, always-on utility designed to save you time across the entire web. - Automatic Number Detection: Browse the internet normally. Whenever SyncMate detects a valid phone number on a webpage, it instantly appends a small, floating green WhatsApp icon next to it. - One-Click Chatting: Click the icon to instantly open a WhatsApp conversation with that exact number. - Zero Friction: No more copying numbers, opening your phone, saving a temporary contact, waiting for WhatsApp to sync, and manually searching for their name just to send a single message! - Customizable Rules: Use our advanced Regex presets to control exactly how and where numbers are detected, and optionally configure auto-appended country codes for local numbers. 🎨 Beautiful, Native Interface We built SyncMate to feel native. It features a gorgeous, modern UI that supports both Light Mode and Dark Mode. The interface uses glassmorphism, responsive animations, and a customizable floating widget that you can blacklist on specific URLs to keep your browsing experience clean. 🔔 Smart Browser Notifications Never miss an important message, even if your CRM tab is minimized. SyncMate delivers rich browser notifications directly to your desktop for: - New incoming messages - When a chat is specifically assigned to you - When a colleague leaves an internal note on one of your chats - When your Admin connection goes offline - Customize your alerts with pleasing notification chimes! 🔒 Security & Privacy First Your data is unconditionally yours. 1. End-to-End Encryption: We utilize a state-of-the-art relayed WebSocket architecture. Messages strictly bounce between your phone, your team’s screens, and our secure relay server. 2. Zero Document Hoarding: We do not read, data-mine, or sell your conversation history. 3. Local Storage: Your sensitive tokens and chat associations are stored strictly locally in your browser's encrypted chrome.storage.local environment. 🚀 Getting Started in 3 Easy Steps! For the Smart Widget (Free): 1. Install the SyncMate extension. 2. Open WhatsApp Web to establish a connection. 3. Browse the web! Click the WhatsApp icon next to any phone number to instantly chat. For the Team Shared Inbox: 1. The Admin opens WhatsApp Web and logs into the SyncMate Widget. 2. The Admin activates the Shared Inbox add-on via their Assistro's dashboard, copies the Bearer Token, and pastes it into the Widget to start broadcasting. 3. Remote employees open the extension, paste the token, and instantly connect to the Master WhatsApp connection to start collaborating! Note: SyncMate requires an active subscription on Assistro for Team Shared Inbox features and premium CRM integrations. A free tier is available for the Smart Number Detection widget and basic individual usage. SyncMate is not affiliated with, sponsored by, or endorsed by WhatsApp Inc., Meta, ClickUp, Monday.com, or HubSpot.

User reviews

Extension files

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs
54
IPv4
1

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

No URLs found
No IP addresses found

55 indicators in this extension

55 indicators
0 versions analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe
Version
Size
Verdict
Findings
Permhash
2.0.1
Latest
2.43 MBNot scanned—
9aa84843b3049c7e74af9dc22a2214bb52c36f28393520b2372e927a108d4228
2.0.0
2.43 MBNot scanned—
9aa84843b3049c7e74af9dc22a2214bb52c36f28393520b2372e927a108d4228
1.2.9
2.42 MBNot scanned—
9aa84843b3049c7e74af9dc22a2214bb52c36f28393520b2372e927a108d4228
1.2.8
2.39 MBNot scanned—
9aa84843b3049c7e74af9dc22a2214bb52c36f28393520b2372e927a108d4228
1.2.7
2.47 MBNot scanned—
9aa84843b3049c7e74af9dc22a2214bb52c36f28393520b2372e927a108d4228
1.2.6
2.45 MBNot scanned—
9aa84843b3049c7e74af9dc22a2214bb52c36f28393520b2372e927a108d4228
1.2.5
2.29 MBNot scanned—
9aa84843b3049c7e74af9dc22a2214bb52c36f28393520b2372e927a108d4228
1.2.4
2.29 MBNot scanned—
9aa84843b3049c7e74af9dc22a2214bb52c36f28393520b2372e927a108d4228
1.2.3
2.29 MBNot scanned—
9aa84843b3049c7e74af9dc22a2214bb52c36f28393520b2372e927a108d4228
1.2.2
2.14 MBNot scanned—
9aa84843b3049c7e74af9dc22a2214bb52c36f28393520b2372e927a108d4228
Showing 1 to 10 of 20 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.