Is "Steward" on Chrome Web Store Safe to Install?
Steward 是一款基于 Manifest V3 的 Chrome 命令启动器，通过快捷键在弹窗或当前页面内打开命令框，输入触发词即可快速访问常用功能。 【主要功能】 • 快捷键：Ctrl+K（Mac：Command+K）打开弹窗命令框，Ctrl+J 在当前页面内打开 • 书签 / 历史 / 标签：bm、his、tab 等触发词搜索并打开 • 页面内：获取当前页信息、页面链接、大纲（nav、outline、meta） • 工作流与搜索：自定义工作流、搜索引擎与计算 • 外观：主题、字号、强调色、列表密度等可调，支持导出/导入配置 【隐私与数据】 配置与设置保存在 Chrome 同步存储或本地，书签/历史/标签仅在本地读取与展示，不上传。详见扩展文档站隐私政策。
Risk Assessment
Analyzed301 security findings detected across all analyzers
Chrome extension requesting 11 permissions
Severity Breakdown
Finding Categories
YARA Rules Matched
12 rules(71 hits)Requested Permissions
11 permissionsManage other installed extensions
Access and modify data on every website you visit
Read and modify your browsing history
Manage, modify, and monitor downloads
About This Extension
Detailed Findings
74 totalYARA Rule Matches
12 rulesIndicators of Compromise
Network indicators, suspicious strings, and potential IoCs extracted during analysis
All Indicators · 219
detected Domain: xu.call XIOC detected Domain: xu.call
extracted_from_files
detected Domain: u.call XIOC detected Domain: u.call
extracted_from_files
detected Domain: cmd.id XIOC detected Domain: cmd.id
extracted_from_files
detected Domain: e.next XIOC detected Domain: e.next
extracted_from_files
detected IP: ::bac XIOC detected IP: ::bac
extracted_from_files
detected MD5 Hash: EB6533FF9AF611E7B9EFDBAEC0E3B63F XIOC detected MD5 Hash: EB6533FF9AF611E7B9EFDBAEC0E3B63F
extracted_from_files
detected MD5 Hash: EB6534009AF611E7B9EFDBAEC0E3B63F XIOC detected MD5 Hash: EB6534009AF611E7B9EFDBAEC0E3B63F
extracted_from_files
detected URL: https://...?q= XIOC detected URL: https://...?q=
extracted_from_files
detected URL: https://clients2.google.com/service/update2/crx XIOC detected URL: https://clients2.google.com/service/update2/crx
extracted_from_files
detected MD5 Hash: EB6533FE9AF611E7B9EFDBAEC0E3B63F XIOC detected MD5 Hash: EB6533FE9AF611E7B9EFDBAEC0E3B63F
extracted_from_files
detected MD5 Hash: EB6533FD9AF611E7B9EFDBAEC0E3B63F XIOC detected MD5 Hash: EB6533FD9AF611E7B9EFDBAEC0E3B63F
extracted_from_files
detected MD5 Hash: 3CC30B1E9AF811E7B9EFDBAEC0E3B63F XIOC detected MD5 Hash: 3CC30B1E9AF811E7B9EFDBAEC0E3B63F
extracted_from_files
detected MD5 Hash: 3CC30B1F9AF811E7B9EFDBAEC0E3B63F XIOC detected MD5 Hash: 3CC30B1F9AF811E7B9EFDBAEC0E3B63F
extracted_from_files
detected URL: https://zh.wikipedia.org/wiki/Special:Search?search= XIOC detected URL: https://zh.wikipedia.org/wiki/Special:Search?search=
extracted_from_files
detected URL: https://www.baidu.com/s?wd= XIOC detected URL: https://www.baidu.com/s?wd=
extracted_from_files
detected URL: https://www.google.com/search?q= XIOC detected URL: https://www.google.com/search?q=
extracted_from_files
detected URL: https://api.example.com?q= XIOC detected URL: https://api.example.com?q=
extracted_from_files
detected Domain: ns.adobe.com XIOC detected Domain: ns.adobe.com
extracted_from_files
detected URL: https://reactjs.org/docs/error-decoder.html?invariant= XIOC detected URL: https://reactjs.org/docs/error-decoder.html?invariant=
extracted_from_files
detected URL: https://... XIOC detected URL: https://...
extracted_from_files
detected Domain: rawitems.map XIOC detected Domain: rawitems.map
extracted_from_files
detected Domain: p.id XIOC detected Domain: p.id
extracted_from_files
detected Domain: meta.map XIOC detected Domain: meta.map
extracted_from_files
detected Domain: toopen.map XIOC detected Domain: toopen.map
extracted_from_files
detected Domain: e.data.navs.map XIOC detected Domain: e.data.navs.map
extracted_from_files
detected Domain: e.data.outline.map XIOC detected Domain: e.data.outline.map
extracted_from_files
detected Domain: workflow-bh5c3xut.js.map XIOC detected Domain: workflow-bh5c3xut.js.map
extracted_from_files
detected Domain: g.id XIOC detected Domain: g.id
extracted_from_files
detected Domain: m.map XIOC detected Domain: m.map
extracted_from_files
detected Domain: n.data.navs.map XIOC detected Domain: n.data.navs.map
extracted_from_files
detected Domain: n.data.outline.map XIOC detected Domain: n.data.outline.map
extracted_from_files
detected Domain: s.name XIOC detected Domain: s.name
extracted_from_files
detected Domain: index-7ztmfkxz.js.map XIOC detected Domain: index-7ztmfkxz.js.map
extracted_from_files
detected Domain: arr.map XIOC detected Domain: arr.map
extracted_from_files
detected Domain: ids.map XIOC detected Domain: ids.map
extracted_from_files
detected Domain: c.map XIOC detected Domain: c.map
extracted_from_files
detected Domain: d.map XIOC detected Domain: d.map
extracted_from_files
detected Domain: d.name XIOC detected Domain: d.name
extracted_from_files
detected Domain: window.top XIOC detected Domain: window.top
extracted_from_files
detected Domain: k.id XIOC detected Domain: k.id
extracted_from_files
detected Domain: e.search XIOC detected Domain: e.search
extracted_from_files
detected Domain: data.workflow.id XIOC detected Domain: data.workflow.id
extracted_from_files
detected Domain: prev.map XIOC detected Domain: prev.map
extracted_from_files
detected Domain: editing.id XIOC detected Domain: editing.id
extracted_from_files
detected Domain: workflows.map XIOC detected Domain: workflows.map
extracted_from_files
detected Domain: items.map XIOC detected Domain: items.map
extracted_from_files
detected Domain: options.map XIOC detected Domain: options.map
extracted_from_files
detected Domain: colors.map XIOC detected Domain: colors.map
extracted_from_files
detected Domain: loaded.search XIOC detected Domain: loaded.search
extracted_from_files
detected Domain: n.name XIOC detected Domain: n.name
extracted_from_files
detected Domain: x.id XIOC detected Domain: x.id
extracted_from_files
detected Domain: q.memoizedprops.style XIOC detected Domain: q.memoizedprops.style
extracted_from_files
detected Domain: prev.search XIOC detected Domain: prev.search
extracted_from_files
detected Domain: engines.map XIOC detected Domain: engines.map
extracted_from_files
detected Domain: current.id XIOC detected Domain: current.id
extracted_from_files
detected Domain: j.map XIOC detected Domain: j.map
extracted_from_files
detected Domain: se.map XIOC detected Domain: se.map
extracted_from_files
detected Domain: q.map XIOC detected Domain: q.map
extracted_from_files
detected Domain: k.map XIOC detected Domain: k.map
extracted_from_files
detected Domain: ee.map XIOC detected Domain: ee.map
extracted_from_files
detected Domain: ae.map XIOC detected Domain: ae.map
extracted_from_files
detected Domain: index-cvdr56tj.js.map XIOC detected Domain: index-cvdr56tj.js.map
extracted_from_files
detected Domain: c.workflow.id XIOC detected Domain: c.workflow.id
extracted_from_files
detected Domain: y.map XIOC detected Domain: y.map
extracted_from_files
detected Domain: c.id XIOC detected Domain: c.id
extracted_from_files
detected Domain: x.map XIOC detected Domain: x.map
extracted_from_files
detected Domain: h.map XIOC detected Domain: h.map
extracted_from_files
detected Domain: y.id XIOC detected Domain: y.id
extracted_from_files
detected Domain: p.map XIOC detected Domain: p.map
extracted_from_files
detected Domain: content-c9whu7he.js.map XIOC detected Domain: content-c9whu7he.js.map
extracted_from_files
detected Domain: navitems.map XIOC detected Domain: navitems.map
extracted_from_files
detected Domain: t.search XIOC detected Domain: t.search
extracted_from_files
detected Domain: o.search XIOC detected Domain: o.search
extracted_from_files
detected Domain: l.map XIOC detected Domain: l.map
extracted_from_files
detected Domain: b.map XIOC detected Domain: b.map
extracted_from_files
detected Domain: m.name XIOC detected Domain: m.name
extracted_from_files
detected Domain: alarm.name XIOC detected Domain: alarm.name
extracted_from_files
detected Domain: win.id XIOC detected Domain: win.id
extracted_from_files
detected Domain: window.location.host XIOC detected Domain: window.location.host
extracted_from_files
detected Domain: window.location.search XIOC detected Domain: window.location.search
extracted_from_files
detected Domain: s.map XIOC detected Domain: s.map
extracted_from_files
detected Domain: elem.click XIOC detected Domain: elem.click
extracted_from_files
detected Domain: i.map XIOC detected Domain: i.map
extracted_from_files
detected Domain: msg.data XIOC detected Domain: msg.data
extracted_from_files
detected Domain: tabs.map XIOC detected Domain: tabs.map
extracted_from_files
detected Domain: chrome.tabs.tab XIOC detected Domain: chrome.tabs.tab
extracted_from_files
detected Domain: list.map XIOC detected Domain: list.map
extracted_from_files
detected Domain: item.id XIOC detected Domain: item.id
extracted_from_files
detected Domain: port.name XIOC detected Domain: port.name
extracted_from_files
detected Domain: msg.id XIOC detected Domain: msg.id
extracted_from_files
detected Domain: o.name XIOC detected Domain: o.name
extracted_from_files
detected Domain: chrome.downloads.search XIOC detected Domain: chrome.downloads.search
extracted_from_files
detected Domain: chrome.downloads.show XIOC detected Domain: chrome.downloads.show
extracted_from_files
detected Domain: s.id XIOC detected Domain: s.id
extracted_from_files
detected Domain: r.name XIOC detected Domain: r.name
extracted_from_files
detected Domain: background-d3ljamz-.js.map XIOC detected Domain: background-d3ljamz-.js.map
extracted_from_files
detected Domain: node.id XIOC detected Domain: node.id
extracted_from_files
detected Domain: input.tab XIOC detected Domain: input.tab
extracted_from_files
detected Domain: menu-dropdown-toggle.menu XIOC detected Domain: menu-dropdown-toggle.menu
extracted_from_files
detected Domain: portbridge-dpiqzia-.js.map XIOC detected Domain: portbridge-dpiqzia-.js.map
extracted_from_files
detected Domain: m.id XIOC detected Domain: m.id
extracted_from_files
detected Domain: chrome.history.search XIOC detected Domain: chrome.history.search
extracted_from_files
detected Domain: r.data XIOC detected Domain: r.data
extracted_from_files
detected Domain: o.id XIOC detected Domain: o.id
extracted_from_files
detected Domain: w.id XIOC detected Domain: w.id
extracted_from_files
detected Domain: sorted.map XIOC detected Domain: sorted.map
extracted_from_files
detected Domain: triggers.map XIOC detected Domain: triggers.map
extracted_from_files
detected Domain: d.id XIOC detected Domain: d.id
extracted_from_files
detected Domain: engine.name XIOC detected Domain: engine.name
extracted_from_files
detected Domain: btn.glass XIOC detected Domain: btn.glass
extracted_from_files
detected Domain: s.call XIOC detected Domain: s.call
extracted_from_files
detected Domain: h.call XIOC detected Domain: h.call
extracted_from_files
detected Domain: c.name XIOC detected Domain: c.name
extracted_from_files
detected Domain: stored.map XIOC detected Domain: stored.map
extracted_from_files
detected Domain: h.id XIOC detected Domain: h.id
extracted_from_files
detected Domain: b.id XIOC detected Domain: b.id
extracted_from_files
detected Domain: filtered.map XIOC detected Domain: filtered.map
extracted_from_files
detected Domain: m.next XIOC detected Domain: m.next
extracted_from_files
detected Domain: n.call XIOC detected Domain: n.call
extracted_from_files
detected Domain: c.data XIOC detected Domain: c.data
extracted_from_files
detected Domain: c.compare XIOC detected Domain: c.compare
extracted_from_files
detected Domain: a.id XIOC detected Domain: a.id
extracted_from_files
detected Domain: d.is XIOC detected Domain: d.is
extracted_from_files
detected Domain: f.name XIOC detected Domain: f.name
extracted_from_files
detected Domain: b.target XIOC detected Domain: b.target
extracted_from_files
detected Domain: h.target XIOC detected Domain: h.target
extracted_from_files
detected Domain: ba.data XIOC detected Domain: ba.data
extracted_from_files
detected Domain: yg.next XIOC detected Domain: yg.next
extracted_from_files
detected Domain: b.next XIOC detected Domain: b.next
extracted_from_files
detected Domain: f.next XIOC detected Domain: f.next
extracted_from_files
detected Domain: g.next XIOC detected Domain: g.next
extracted_from_files
detected Domain: a.style XIOC detected Domain: a.style
extracted_from_files
detected Domain: b.style XIOC detected Domain: b.style
extracted_from_files
detected Domain: b.is XIOC detected Domain: b.is
extracted_from_files
detected Domain: a.target XIOC detected Domain: a.target
extracted_from_files
detected Domain: a.data XIOC detected Domain: a.data
extracted_from_files
detected Domain: b.data XIOC detected Domain: b.data
extracted_from_files
detected Domain: a.top XIOC detected Domain: a.top
extracted_from_files
detected Domain: l.now XIOC detected Domain: l.now
extracted_from_files
detected Domain: p.now XIOC detected Domain: p.now
extracted_from_files
detected Domain: ja.call XIOC detected Domain: ja.call
extracted_from_files
detected Domain: a.call XIOC detected Domain: a.call
extracted_from_files
detected Domain: a.name XIOC detected Domain: a.name
extracted_from_files
detected Domain: nb.name XIOC detected Domain: nb.name
extracted_from_files
detected Domain: b.name XIOC detected Domain: b.name
extracted_from_files
detected Domain: wbt6az.js.map XIOC detected Domain: wbt6az.js.map
extracted_from_files
detected Domain: j.call XIOC detected Domain: j.call
extracted_from_files
detected Domain: f.call XIOC detected Domain: f.call
extracted_from_files
detected Domain: a.next XIOC detected Domain: a.next
extracted_from_files
detected Domain: b.call XIOC detected Domain: b.call
extracted_from_files
detected Domain: m.call XIOC detected Domain: m.call
extracted_from_files
detected Domain: a.id-b.id XIOC detected Domain: a.id-b.id
extracted_from_files
detected Domain: u.id XIOC detected Domain: u.id
extracted_from_files
detected Domain: l.id XIOC detected Domain: l.id
extracted_from_files
detected Domain: n.id XIOC detected Domain: n.id
extracted_from_files
detected Domain: l.name XIOC detected Domain: l.name
extracted_from_files
detected Domain: i.id XIOC detected Domain: i.id
extracted_from_files
detected Domain: zh.wikipedia.org XIOC detected Domain: zh.wikipedia.org
extracted_from_files
detected Domain: www.baidu.com XIOC detected Domain: www.baidu.com
extracted_from_files
detected Domain: i.name XIOC detected Domain: i.name
extracted_from_files
detected IP: ed:: XIOC detected IP: ed::
extracted_from_files
detected Domain: reactjs.org XIOC detected Domain: reactjs.org
extracted_from_files
detected Domain: object.prototype.hasownproperty.call XIOC detected Domain: object.prototype.hasownproperty.call
extracted_from_files
detected Domain: config.search XIOC detected Domain: config.search
extracted_from_files
detected Domain: t.map XIOC detected Domain: t.map
extracted_from_files
detected Domain: r.id XIOC detected Domain: r.id
extracted_from_files
detected Domain: k.next XIOC detected Domain: k.next
extracted_from_files
detected Domain: x.next XIOC detected Domain: x.next
extracted_from_files
detected Domain: c.next XIOC detected Domain: c.next
extracted_from_files
detected Domain: n.compare XIOC detected Domain: n.compare
extracted_from_files
detected Domain: e.id XIOC detected Domain: e.id
extracted_from_files
detected Domain: r.is XIOC detected Domain: r.is
extracted_from_files
detected Domain: r.next XIOC detected Domain: r.next
extracted_from_files
detected Domain: i.next XIOC detected Domain: i.next
extracted_from_files
detected Domain: s.next XIOC detected Domain: s.next
extracted_from_files
detected Domain: o.next XIOC detected Domain: o.next
extracted_from_files
detected Domain: u.next XIOC detected Domain: u.next
extracted_from_files
detected Domain: h.next XIOC detected Domain: h.next
extracted_from_files
detected Domain: w.call XIOC detected Domain: w.call
extracted_from_files
detected Domain: p.next XIOC detected Domain: p.next
extracted_from_files
detected Domain: l.data XIOC detected Domain: l.data
extracted_from_files
detected Domain: object.prototype.tostring.call XIOC detected Domain: object.prototype.tostring.call
extracted_from_files
detected Domain: d.next XIOC detected Domain: d.next
extracted_from_files
detected Domain: bt.next XIOC detected Domain: bt.next
extracted_from_files
detected Domain: n.next XIOC detected Domain: n.next
extracted_from_files
detected Domain: l.next XIOC detected Domain: l.next
extracted_from_files
detected Domain: t.next XIOC detected Domain: t.next
extracted_from_files
detected Domain: object.is XIOC detected Domain: object.is
extracted_from_files
detected Domain: e.top XIOC detected Domain: e.top
extracted_from_files
detected Domain: t.target XIOC detected Domain: t.target
extracted_from_files
detected Domain: p.target XIOC detected Domain: p.target
extracted_from_files
detected Domain: k.target XIOC detected Domain: k.target
extracted_from_files
detected Domain: n.data XIOC detected Domain: n.data
extracted_from_files
detected Domain: h.data XIOC detected Domain: h.data
extracted_from_files
detected Domain: t.is XIOC detected Domain: t.is
extracted_from_files
detected Domain: e.target XIOC detected Domain: e.target
extracted_from_files
detected Domain: array.prototype.slice.call XIOC detected Domain: array.prototype.slice.call
extracted_from_files
detected Domain: this.target XIOC detected Domain: this.target
extracted_from_files
detected Domain: date.now XIOC detected Domain: date.now
extracted_from_files
detected Domain: e.data XIOC detected Domain: e.data
extracted_from_files
detected Domain: t.data XIOC detected Domain: t.data
extracted_from_files
detected Domain: e.call XIOC detected Domain: e.call
extracted_from_files
detected Domain: e.name XIOC detected Domain: e.name
extracted_from_files
detected Domain: t.name XIOC detected Domain: t.name
extracted_from_files
detected Domain: l.call XIOC detected Domain: l.call
extracted_from_files
detected Domain: i.call XIOC detected Domain: i.call
extracted_from_files
detected Domain: e.style XIOC detected Domain: e.style
extracted_from_files
detected Domain: t.style XIOC detected Domain: t.style
extracted_from_files
detected Domain: t.call XIOC detected Domain: t.call
extracted_from_files
detected Domain: ec.call XIOC detected Domain: ec.call
extracted_from_files
detected Domain: c.id-p.id XIOC detected Domain: c.id-p.id
extracted_from_files
detected Domain: performance.now XIOC detected Domain: performance.now
extracted_from_files
detected Domain: i.now XIOC detected Domain: i.now
extracted_from_files
detected Domain: o.now XIOC detected Domain: o.now
extracted_from_files
detected Domain: wl.call XIOC detected Domain: wl.call
extracted_from_files
detected IP: ea:: XIOC detected IP: ea::
extracted_from_files
detected Domain: l.style XIOC detected Domain: l.style
extracted_from_files
detected Domain: m.memoizedprops.style XIOC detected Domain: m.memoizedprops.style
extracted_from_files
detected Domain: t.id XIOC detected Domain: t.id
extracted_from_files
Security Analysis Summary
Security Analysis Overview
Steward is a Chrome Web Store extension published by [email protected]. Version 5.0.1 has been analyzed by the Risky Plugins security platform, receiving a risk score of 91.12/100 (CRITICAL risk) based on 301 security findings.
Risk Assessment
This extension presents critical security risk. Severe issues were detected, potentially including malware indicators, exposed secrets, or dangerous behaviors. Installation is strongly discouraged until these issues are addressed.
Findings Breakdown
- Medium: 230 finding(s)
- Low: 71 finding(s)
What Was Analyzed
The security assessment covers multiple analysis categories:
- Malware Detection: YARA rule matching against 2,400+ malware signatures
- Secret Detection: Scanning for exposed API keys, tokens, and credentials
- Static Analysis: Code-level security analysis for common vulnerability patterns
- Network Analysis: Detection of suspicious network communications and endpoints
- Obfuscation Detection: Identification of code obfuscation techniques
Developer Information
Steward is published by [email protected] on the Chrome Web Store marketplace. The extension has approximately 590 users.
Recommendation
This extension is not recommended for installation without thorough manual review. Consider alternatives with lower risk scores, or contact the developer to address the identified security concerns.
Source Code Not Available
Source code is not available for this version of the extension.
Frequently Asked Questions
Similar Extensions
Related extensions from the same publisher or marketplace
庖丁解语: 查词句/收集/背单词/造句
[email protected]
iAutomator: automation/shortcuts
[email protected]
Research Notes
[email protected]
RoTrade - Roblox Trading Automated
[email protected]
PubMed Citation Bar
[email protected]
Cover-Letter-AI
[email protected]