Starlogs | by Starlight

Extension Purpose

Starlogs is a Chrome extension designed to assist social care practitioners by reducing time spent on administrative tasks. It offers features like intuitive templates, automated reminders, and secure data handling to streamline record-keeping.

Code Analysis

• Module Management: The code uses a module system to manage dependencies and ensure efficient loading of components.
• API Calls: The extension interacts with the Clerk API to manage authentication and session tokens.

  async function i() {
    let e = await (0, r.createClerkClient)({ publishableKey: n });
    return e.session ? await e.session?.getToken() : null;
  }
  

• Event Listeners: Listens for messages and installation events to perform actions like opening popups or setting permissions.

  chrome.runtime.onMessage.addListener((e, t, a) => (i().then(t => { ... }), !0));
  chrome.runtime.onInstalled.addListener(e => { ... });
  

• Network Activity: The extension communicates with Clerk's backend to authenticate users and manage sessions.
• Local Storage: Uses Chrome's local storage to save user permissions and session data.

  chrome.storage.local.set({ microphonePermission: "granted" });
  

• Security: Implements secure data handling practices by using Clerk's API for authentication and session management.

Potential Malicious Indicators

• Obfuscation: The code is minified, which is common for production but can obscure malicious intent.
• Backdoors: No explicit backdoors or unauthorized data exfiltration mechanisms were identified.
• Data Exfiltration: The extension appears to handle data securely, using Clerk's API for authentication.
• Code Execution: No arbitrary code execution or dynamic script injection was observed.

Conclusion

The code primarily focuses on session management and user authentication through Clerk's API. It uses standard Chrome extension APIs for event handling and local storage. No strong indications of malicious behavior were detected.