APIVoid Request Tester

AI Security Review

Risky Plugins reviewed this extension with an AI-assisted security workflow on 2026-05-31. The review verdict is likely false positive with 90% confidence.

Recommended action: no action. Evidence context: threat category none; evidence quality strong.

The APIVoid Request Tester extension has a number of findings that are indicative of its intended functionality as an HTTP request testing tool. The XIOC extractor has detected several domains, including timings.total, profile.id, performance.now, sorted.map, reader.read, and tab.click, which appear to be related to the extension's functionality. Additionally, the extension makes a network call of type 'fetch' in the app.js file. However, none of these findings suggest malicious behavior. The extension's description and functionality are consistent with its intended purpose, and there is no evidence of malware signatures, obfuscation, or other suspicious behavior. One potential counterargument to this verdict is that the extension's lack of developer information and low user count could indicate a potential risk. However, in the absence of any concrete evidence of malicious behavior, this is not sufficient to overturn the verdict. The strongest counterargument would be that the extension's ability to make network requests and access certain domains could potentially be used for malicious purposes. However, this is a common functionality in many extensions, and without evidence of actual malicious behavior, it is not sufficient to justify a different verdict.

Key Reasons

• No malware signatures detected
• No obfuscation detected
• Extension functionality consistent with intended purpose

False Positive Considerations

• IoC extractor garbage