Is Bookmark Memory safe to use?

Bookmark Memory has a security risk score of 31.18/100 (LOW risk). Our security analysis detected 1 findings. Review the detailed security assessment below to understand the specific risks before installation.

What are the security risks of Bookmark Memory?

Based on our automated security analysis, Bookmark Memory presents low risk level. The extension is analyzed for malware patterns, secret exposure, network communications, permissions, and supply chain vulnerabilities.

How is the security score calculated?

Risky Plugins calculates security scores using weighted categories: severity of findings (25 points max), malware detections (35 points), secret exposure (28 points), network communications (10 points), and obfuscation (10 points). Scores range from 0-100, with higher scores indicating greater risk.

What does CRITICAL, HIGH, MEDIUM, LOW, MINIMAL risk mean?

CRITICAL (80-100): Severe security issues like malware. HIGH (60-79): Significant vulnerabilities. MEDIUM (40-59): Moderate security concerns. LOW (20-39): Minor issues. MINIMAL (0-19): Very low risk. Always review findings before installing any extension.

Is "Bookmark Memory" on Chrome Web Store Safe to Install?

[email protected] · chrome · v0.1.5

Bookmark Memory is a browser extension built for people who save a lot of content online. It brings together saved content from X, Reddit, and GitHub into one place so you can search, filter, organize, and revisit it later. Many people save tweets, posts, links, and repositories, but struggle to find them again later. Bookmark Memory solves that problem by turning “I saved it once” into “I can actually find and use it again.” Why Install It - Keep everything in one place No more switching between X, Reddit, and GitHub to find saved content. - Find important information faster Quickly locate previously saved items through search, filtering, and organization. - Make saved content actually useful Turn passive collections into reusable knowledge and reference material. - Built for heavy savers Especially useful for researchers, developers, product teams, designers, writers, and other information-dense workflows. - AI-assisted recall and understanding Connect your own AI provider to summarize, analyze, and better retrieve saved content. Key Features - Save and search X bookmarks - Sync Reddit saved items - Sync GitHub stars - Search, filter, and organize saved content in one place - AI-powered summaries and analysis - Local-first storage Privacy Saved content is stored locally in your browser by default. Content is only sent to your configured AI provider when you actively use AI features. One-Line Value Make your saved content not just stored, but searchable, understandable, and reusable.

Risk Assessment

Analyzed

31.18

out of 100

LOW

1 security finding detected across all analyzers

Chrome extension requesting 9 permissions

Severity Breakdown

Critical

High

Medium

Low

Info

Finding Categories

Network

Requested Permissions

9 permissions

contextMenus

Low

storage

Low

alarms

Low

https://x.com/*

Low

https://twitter.com/*

Low

https://platform.twitter.com/*

Low

https://publish.twitter.com/*

Low

https://www.reddit.com/*

Low

https://oauth.reddit.com/*

Low

About This Extension

Detailed Findings

1 total

AI Security Report

AI Security Review

Risky Plugins reviewed this extension with an AI-assisted security workflow on 2026-05-06. The review verdict is likely false positive with 90% confidence.

Recommended action: suppress false positive.
Risk context: LOW risk, score 31/100.
Evidence context: threat category none; evidence quality moderate.

The Bookmark Memory extension shows minimal security concerns. The only finding is a network detection in chunks/app-Co2JN9gN.js:1 (NET-FETCH-chunks/app-Co2JN9gN.js-1), which identifies a standard fetch API call. This is completely expected behavior for any modern browser extension that needs to communicate with external services. The finding carries medium severity but represents normal functionality, not malicious activity.

The extension's description states it helps users "find the saved posts, links, and repos you remember but can no longer easily find," which aligns with a legitimate bookmark management tool. The developer is listed as [email protected], a personal Gmail address rather than a verified corporate publisher. The user count is only 3, indicating this is a small, early-stage extension.

Critically, there are zero malware signatures, zero obfuscation findings, zero suspicious IoCs (no external domains, IPs, or tracking endpoints), and zero code-smell detections. The findings summary shows only 1 network finding with no critical, high, or low severity issues. No credential access patterns, browser hijacking indicators, or data exfiltration mechanisms were detected.

The strongest counterargument would be that the anonymous developer and minimal user base warrant caution. However, the code itself shows no malicious patterns. Anonymous developers publish legitimate extensions regularly, and the single fetch call in a webpack chunk file is standard for any extension with backend functionality. Without suspicious domains in the network findings or obfuscation masking malicious code, there is no evidence of harmful intent. The extension's behavior matches its stated purpose, and the finding represents normal network activity rather than a security concern.