影刀RPA
🔍 Security Report Available View on Chrome Web StoreChrome will indicate if you already have this installed.
Overview
影刀Chrome自动化插件
Tags
Privacy Practices
Security Analysis — 影刀RPA
Permissions
Code Patterns Detected
External Connections
Package Contents 11 files · 471KB
What This Extension Does
影刀rpa is a Chrome automation plugin that helps developers with productivity tasks. It has been installed by over 800,000 users. While it may be useful for its intended purpose, this report highlights potential security concerns related to its permissions and behavior.
Permissions Explained
- cookiescheck this: This permission allows the extension to access browser cookies, which can include sensitive information like login credentials or personalization data.
Technical: The extension has access tochrome.cookiesAPI, allowing it to read and modify cookies. This could be used for tracking user activity or stealing sensitive information. ⚠ 1 - managementcheck this: This permission allows the extension to manage browser settings and extensions.
Technical: The extension has access tochrome.managementAPI, allowing it to install, update, or remove other extensions. This could be used for malicious purposes like installing malware or hijacking user data. ⚠ 1 - tabscheck this: This permission allows the extension to access and manipulate browser tabs.
Technical: The extension has access tochrome.tabsAPI, allowing it to create, update, or delete tabs. This could be used for malicious purposes like hijacking user browsing sessions or stealing sensitive information. ⚠ 1 - debuggercheck this: This permission allows the extension to access and manipulate browser debugging tools.
Technical: The extension has access tochrome.debuggerAPI, allowing it to inspect and modify browser code. This could be used for malicious purposes like injecting malware or stealing sensitive information. ⚠ 1 - nativeMessagingcheck this: This permission allows the extension to communicate with native applications on the user's system.
Technical: The extension has access tochrome.nativeMessagingAPI, allowing it to send and receive messages with native apps. This could be used for malicious purposes like injecting malware or stealing sensitive information. ⚠ 1 - <all_urls>check this: This permission allows the extension to access all URLs visited by the user, including those on secure (HTTPS) connections.
Technical: The extension has access tochrome.tabsAPI with<all_urls>permission, allowing it to read and modify any URL visited by the user. This could be used for malicious purposes like tracking user activity or stealing sensitive information. ⚠ 1 - downloadscheck this: This permission allows the extension to access and manipulate browser downloads.
Technical: The extension has access tochrome.downloadsAPI, allowing it to create, update, or delete downloads. This could be used for malicious purposes like hijacking user downloads or stealing sensitive information. ⚠ 1 - scriptingcheck this: This permission allows the extension to execute scripts in the browser context.
Technical: The extension has access tochrome.scriptingAPI, allowing it to inject and execute scripts in web pages. This could be used for malicious purposes like injecting malware or stealing sensitive information. ⚠ 1 - storagecheck this: This permission allows the extension to access and manipulate browser storage.
Technical: The extension has access tochrome.storageAPI, allowing it to read and write data in browser storage. This could be used for malicious purposes like stealing sensitive information or tracking user activity. ⚠ 1 - clipboardReadcheck this: This permission allows the extension to access clipboard content.
Technical: The extension has access tochrome.clipboardAPI, allowing it to read and modify clipboard content. This could be used for malicious purposes like stealing sensitive information or tracking user activity. ⚠ 1 - clipboardWritecheck this: This permission allows the extension to write to the clipboard.
Technical: The extension has access tochrome.clipboardAPI, allowing it to modify clipboard content. This could be used for malicious purposes like injecting malware or stealing sensitive information. ⚠ 1
Your Data
The extension accesses browser cookies and clipboard content, which can include sensitive information like login credentials or personalization data. It also sends requests to github.com and www.winrobot360.com, which may be used for tracking user activity or stealing sensitive information.
Technical Details
github.com, www.winrobot360.com. It accesses browser cookies, clipboard content, and storage data. The extension also injects scripts into web pages using the chrome.scripting API.Code Findings
The extension may contain a hardcoded secret, which could be used for malicious purposes like injecting malware or stealing sensitive information.
Technical: The extension contains a hardcoded string in one of its JavaScript files. This string is not clearly documented and may be used as a secret key or password.
💡 Hardcoded secrets are commonly used in legitimate extensions to authenticate with APIs or services.
The extension accesses browser cookies, which can include sensitive information like login credentials or personalization data.
Technical: The extension uses the chrome.cookies API to read and modify cookies. This could be used for malicious purposes like tracking user activity or stealing sensitive information.
💡 Legitimate extensions may access browser cookies to provide features like password management or personalized recommendations.
The extension reads clipboard content, which can include sensitive information like login credentials or personalization data.
Technical: The extension uses the chrome.clipboard API to read and modify clipboard content. This could be used for malicious purposes like tracking user activity or stealing sensitive information.
💡 Legitimate extensions may read clipboard content to provide features like text formatting or code completion.
The extension writes to the clipboard, which could be used for malicious purposes like injecting malware or stealing sensitive information.
Technical: The extension uses the chrome.clipboard API to modify clipboard content. This could be used for malicious purposes like injecting malware or stealing sensitive information.
💡 Legitimate extensions may write to the clipboard to provide features like text formatting or code completion.
Based on this report, we recommend that users exercise caution when installing and using the 影刀rpa extension. While it may be useful for its intended purpose, the extension's permissions and behavior raise concerns about data exposure and potential malicious activity. Users should carefully review the extension's permissions and behavior before installing or updating it.
