Spellaris: AI-powered Chrome extension for real-time grammar checking, tone detection, and text enhancement.
Flags items that declare overly broad host access patterns, enabling interaction with all websites. This level of access can be exploited to inject scripts into trusted sites and increases the risk of sensitive data exposure, cross-site surveillance, and credential harvesting.
Flags items published by entities that haven’t gone through the publisher verification process of the marketplace. Lack of verification may indicate higher risk, as the publisher’s identity and trustworthiness are unconfirmed.
Flags publishers that publish only one item on the marketplace, suggesting concerns about the publisher's reliability.
AI-powered analysis of the extension's source code for security insights and risk assessment.
This Chrome extension provides AI-powered grammar checking, tone detection, and text rewriting by communicating with a backend server. Its main purpose is to enhance user text in real time using AI models, requiring a user-provided Gemini API key.
Key Behaviors:
https://megify-backend.vercel.app via HTTPS POST requests for grammar checking, tone detection, and text rewriting.chrome.storage.sync.Potential Privacy Consideration:
No strong indicators of malicious activity were observed.
API calls detected through static analysis of the source code. For more accurate insights, explore our sandbox dynamic analysis.
Any encoded/decoded secrets we managed to find in the source code, git repository, or related files
Known vulnerabilities and security issues detected in the extension's dependencies and code.
Any identifiers we detected that may indicate external communication from the item's code
Dependencies and third-party libraries used by the extension, including version information and license details.
Compliance status and certifications for the extension and its publisher