Is "Udemy Price Tracker" on Chrome Web Store Safe to Install?

AI Security Review

Risky Plugins reviewed this extension with an AI-assisted security workflow on 2026-05-06. The review verdict is benign but powerful with 85% confidence.

Recommended action: no action.
Risk context: LOW risk, score 36/100.
Evidence context: threat category none; evidence quality moderate.

The Udemy Price Tracker extension presents a clean security profile with only one finding: MANIFEST-SENSITIVE-PERM-TABS in manifest.json. This permission is functionally necessary for the extension's stated purpose of tracking course prices on Udemy. The extension must access tab content to monitor price changes and trigger discount notifications, making the tabs permission a legitimate requirement rather than a security concern.

No malware signatures were detected in any scanned files. The findings_summary shows zero malware-signature, zero malware, and zero obfuscation findings. There are no IoCs extracted from the codebase, which eliminates concerns about data exfiltration to suspicious domains. The extension contains no code-smell findings that would indicate suspicious patterns like credential harvesting, API key exposure, or obfuscated payloads.

The developer attribution uses an email address ([email protected]) rather than a verified company name, which is common for individual developers but reduces accountability. The user count of 357 is moderate and does not indicate either mass distribution of malware or suspiciously low adoption that might suggest a newly deployed threat.

The extension name "Udemy Price Tracker" is descriptive and matches the stated functionality. There is no evidence of typosquatting or impersonation of popular extensions. The version number 1.5 indicates the extension has been updated multiple times, suggesting ongoing maintenance rather than a one-and-done malicious deployment.

Counterargument: A skeptic might argue that the tabs permission grants broad access to all browser tabs, which could theoretically enable credential harvesting or tracking across unrelated sites. This concern is valid for any extension with tabs access, but the evidence does not support malicious intent. There are no network findings showing data transmission to unknown domains, no IoCs targeting login pages or banking sites, and no code patterns indicating credential extraction. The single manifest permission finding aligns exactly with the extension's documented purpose. Without additional evidence of data exfiltration or suspicious network behavior, the tabs permission should be evaluated as a necessary capability for legitimate price tracking rather than an indicator of malicious activity.

This extension should be classified as benign_but_powerful because it has legitimate functionality with a sensitive permission that requires user awareness, but there is no evidence of actual malicious behavior.

Key Reasons

• Single finding is a legitimate tabs permission required for price tracking functionality
• Zero malware signatures, IoCs, or obfuscation findings detected
• No evidence of impersonation, browser hijacking, or credential theft
• Extension functionality matches its stated description

False Positive Considerations

• Tabs permission is legitimate for price tracking use case