Detect Font
Based on the RiskyPlugins AI security review of the observed evidence.
Analysis record
- Analysed
- 10 months ago
- Version
- v1.1.8
- Artifact
- SHA256 7A9…4E1
- Source
- Findings (non-IoC)
No Findings
All security checks passed
Publisher Evidence
Limited evidencePublisher identity, store signals, distribution reach, and warning signals used for context. Treat this as supporting evidence, not a clean bill of health.
Chrome does not expose the same publisher verification data as IDE stores, so this score is deliberately conservative.
11 evidence rows available.
No Threats Detected
This extension passed all security checks
AI Security Report
AI Security Review
Evidence context: threat category none; evidence quality moderate.
Detect Font is a legitimate browser extension for identifying fonts on web pages. The 29 total findings are driven by known false-positive patterns rather than malicious behavior.
IoC Findings Analysis: The 11 IoC findings contain multiple documented XIOC extractor false positives. event.target, tooltip.style.top, and tab.id are JavaScript property access chains misidentified as domains—these are not network destinations. The remaining domains are benign infrastructure: fonts.googleapis.com and clients2.google.com are Google services for font delivery and Chrome updates respectively. softoolhub.com is the extension's own service domain, referenced in https://softoolhub.com/detectfont and https://softoolhub.com/detectfontuninstall for the font detection API and uninstall functionality. None of these domains indicate credential theft, browser hijacking, or data exfiltration.
Manifest Analysis: The tabs permission flagged in manifest.json is appropriate for this extension's stated purpose. Font detection requires reading page content to analyze CSS and rendered text. This is not a sensitive permission abuse but a legitimate capability requirement.
Code-Smell Findings: The 17 code-smell findings (severity: high in the summary but these are classified as low/noise per CVEQ guidelines) are expected for non-trivial JavaScript and do not indicate malicious behavior. There are zero malware signatures and zero obfuscation findings, which would be expected for actual malicious code.
Counterargument: A skeptic might argue the developer [email protected] is an unverified email address rather than an organization, suggesting potential anonymity concerns. However, individual developers publishing legitimate extensions is common on Chrome Web Store. The extension's functionality matches its description, the permissions are appropriate for font detection, and the domains referenced are either the extension's own service or Google infrastructure. There is no evidence of credential theft, browser hijacking, proxyware, or malware delivery. The findings profile matches the known false-positive patterns documented in CVEQ guidelines.
Key Reasons
- XIOC false positives (event.target, tooltip.style.top, tab.id) are JavaScript property access, not domains
- All domains are benign: Google infrastructure (fonts.googleapis.com, clients2.google.com) and extension's own service (softoolhub.com)
- Zero malware signatures and zero obfuscation findings
- Tabs permission is legitimate for font detection functionality
- Extension behavior matches stated purpose with no malicious indicators
False Positive Considerations
- XIOC property access chains misread as domains
- Google infrastructure domains flagged as IoCs
- Code-smell findings (17) are noise per CVEQ guidelines
- Extension service domain (softoolhub.com) flagged as suspicious
Reviewed 2026-05-08; recommended action: suppress false positive; model confidence 85%.
Source Code Not Available
Source code is not available for this version of the extension.
About This Extension
Frequently Asked Questions
Similar Extensions
Related extensions from the same publisher or marketplace
AI Grammar Checker
[email protected]
Transcript For Youtube Videos
[email protected]
Dark Mode
[email protected]
种草星球-TikTok爆单神器，商品自动提报采集邀评【永久免费】
[email protected]
Kindredly - A safer, private web for families
[email protected]
Open Headers
[email protected]