Chrome Web Store

ChatGPT Usage Meter

0b808df4-114c-54bc-ad94-083295920cea | v1.0.0
61/ 100
MEDIUM risk
Risk verdict
Review before use

Score-based assessment (medium risk, 61/100). No analyst review available.

Analysis record

Analysed
6 days ago
Version
v1.0.0
Artifact
SHA256 E58…6AB
Source
Findings (non-IoC)

Evidence ledger

Ranked by severity · findings with a source location link to the code viewer

36 detail rows

YARA Rule Matches

7 rules
SeverityRuleHitsFilesMetadata
LOWpostinstall network communication 6
README.mdpage-injector.jsshared/tokens.js +3 more
-
LOWpostinstall file manipulation 4
background.jsoptions/options.jscontent-script.js +1 more
-
LOWpostinstall obfuscation 4
page-injector.jsshared/tokens.jsREADME.md +1 more
-
LOWpostinstall system command 7
page-injector.jsshared/tokens.jsoverlay.css +4 more
-
LOWpostinstall crypto operations 1
_metadata/verified_contents.json
-
LOWpostinstall file download 6
popup/popup.jspage-injector.jsshared/tokens.js +3 more
-
LOWpostinstall persistence mechanism 2
content-script.jsbackground.js
-

Publisher Evidence

Limited evidence

[email protected]

Publisher identity, store signals, distribution reach, and warning signals used for context. Treat this as supporting evidence, not a clean bill of health.

Chrome does not expose the same publisher verification data as IDE stores, so this score is deliberately conservative.

35
Noisy-finding weight
x1.00
Publisher domain
No domain
Missing
Store verification signal
Limited signal
Limited
Extension portfolio
6
Portfolio

13 evidence rows available.

Finding Categories

5
Network
24
IoC Indicators

YARA Rules Matched

7 rules(30 hits)
postinstall network communication postinstall file manipulation postinstall obfuscation postinstall system command postinstall crypto operations postinstall file download postinstall persistence mechanism

Requested Permissions

6 permissions
cookies

Read and modify cookies on all sites

High
tabs
Medium
storage
Low
alarms
Low
notifications
Low
https://chatgpt.com/*
Low

Security Analysis Summary

Security Analysis Overview

ChatGPT Usage Meter is a Chrome Web Store extension published by [email protected]. Version 1.0.0 has been analyzed by the Risky Plugins security platform, receiving a risk score of 60.75/100 (MEDIUM risk) based on 60 security findings.

Risk Assessment

This extension presents moderate security risk. Several findings were detected that may warrant attention. Users should carefully review the permissions and findings before installation.

Findings Breakdown

  • Medium: 30 finding(s)
  • Low: 30 finding(s)

What Was Analyzed

The security assessment covers multiple analysis categories:

  • Malware Detection: YARA rule matching against 2,400+ malware signatures
  • Secret Detection: Scanning for exposed API keys, tokens, and credentials
  • Static Analysis: Code-level security analysis for common vulnerability patterns
  • Network Analysis: Detection of suspicious network communications and endpoints
  • Obfuscation Detection: Identification of code obfuscation techniques

Developer Information

ChatGPT Usage Meter is published by [email protected] on the Chrome Web Store marketplace.

Recommendation

This extension is not recommended for installation without thorough manual review. Consider alternatives with lower risk scores, or contact the developer to address the identified security concerns.

About This Extension

Real time ChatGPT usage tracker. See your Thinking messages left, 5-hour and weekly limits, reset times and chat size, just above the ChatGPT chatbox. Steps to use- 1. Install the extension 2. Open chatgpt.com and it will automatically show the usage strip just above the chatbox. That's all. REQUIREMENTS- Sign in to chatgpt.com in the same browser profile. Works with Free, Go, Plus, Pro and Business plans. What you see depends on what ChatGPT reports for your plan. ChatGPT Usage Meter FEATURES: • Display ChatGPT usage and reset time just above the ChatGPT chat box. • Thinking messages left, with the time they reset • 5-hour and weekly usage with progress bars (on plans that have them) • Limit forecast - warns you when you're on pace to run out before the reset • Feature quotas - deep research, image generation, file uploads and agent • Limit-hit countdown - the moment a limit is reached, see exactly when it resets • Chat size - how many tokens the current chat costs per message • Toolbar popup with progress bars, reset countdowns and quick controls • Desktop notifications at thresholds you choose (75%, 90%, 100% - or any %) • Set your own caps for models with fixed limits • Configurable refresh interval (1–15 minutes) PRIVACY- The extension talks only to chatgpt.com using your existing browser session. It reads the same internal usage data that ChatGPT's web app uses. Nothing leaves your browser. No telemetry, no analytics, no remote servers. Support: Questions or feedback? Contact us at [email protected] Not affiliated with or endorsed by OpenAI. ChatGPT is a trademark of OpenAI.

Frequently Asked Questions