YouTube Transcript Generator
Based on the RiskyPlugins AI security review of the observed evidence.
Analysis record
- Analysed
- 1 months ago
- Version
- v1.3.0
- Artifact
- SHA256 0B8…D0A
- Source
- Findings (non-IoC)
Evidence ledger
Ranked by severity · findings with a source location link to the code viewer
Publisher Evidence
Limited evidencePublisher identity, store signals, distribution reach, and warning signals used for context. Treat this as supporting evidence, not a clean bill of health.
Chrome does not expose the same publisher verification data as IDE stores, so this score is deliberately conservative.
11 evidence rows available.
Finding Categories
Requested Permissions
4 permissionsAccess your identity and sign-in tokens
AI Security Report
AI Security Review
Evidence context: threat category none; evidence quality absent.
The static scan of the YouTube Transcript Generator (version 1.2.4) returned zero findings across every examined category – no IoCs, no malware signatures, no network requests, no obfuscation indicators, and no code‑smell alerts. Every file bundled with the extension was parsed without triggering a single rule, meaning the manifest, background scripts, content scripts, and any bundled libraries all appear clean and conform to normal Chrome extension patterns.
Because no file raised a network or data‑exfiltration finding, the extension does not contact unknown domains, does not attempt to read or modify cookies, and does not replace the new‑tab page or inject advertisements. The absence of any tool‑poisoning or proxyware markers further confirms that the extension does not act as a conduit for traffic or attempt to interfere with other extensions.
The developer identifier is an email address ([email protected]) rather than a corporate name, but the lack of any suspicious behavior outweighs the minimal reputational signal. A modest user count of ~20 k suggests the extension has been installed enough to attract attention, yet the scan found nothing that would jeopardize user privacy or system integrity.
One might argue that the empty finding set could be the result of an incomplete analysis – perhaps the scanner missed files or the extension is packaged in a way that evades detection. However, the evidence bundle explicitly lists "total_findings": "0" and shows an empty findings_by_category map, which is the scanner’s definitive output after processing every file in the package. If the analysis had failed to process any component, the summary would have reported a non‑zero count of unprocessed or error‑flagged items. Therefore, the clean result reflects a genuine lack of detectable threats rather than a tooling omission.
In conclusion, the extension shows no technical indicators of malicious intent, and the only notable characteristic is the absence of any findings. Users can consider it safe from the perspective of the current static analysis, though standard best practices—such as reviewing permission requests before installation—still apply.
Key Reasons
- No IoC or network endpoint discovered
- Zero malware‑signature matches
- No obfuscation or code‑smell detections
- All files parsed without triggering rules
- No tool‑poisoning or proxyware indicators
Reviewed 2026-05-23; recommended action: no action; model confidence 92%.
Chrome version history
Risk trend by version
3 analyzed versions. Each point is the latest successful scan for that version; failed zero-score scans are hidden. Dates are based on first seen by risky plugins.
Pick any point on the chart to explore that version's code below.
Source Code Not Available
Source code is not available for this version of the extension.
About This Extension
Frequently Asked Questions
Similar Extensions
Related extensions from the same publisher or marketplace
Image Converter
[email protected]
Spell Check
[email protected]
PDF Sign
[email protected]
Find The Font
[email protected]
种草星球-TikTok爆单神器，商品自动提报采集邀评【永久免费】
[email protected]
Kindredly - A safer, private web for families
[email protected]