Is SVG Wizard safe to use?

SVG Wizard has a security risk score of 47.87/100 (MEDIUM risk). Our security analysis detected 40 findings. Review the detailed security assessment below to understand the specific risks before installation.

What are the security risks of SVG Wizard?

Based on our automated security analysis, SVG Wizard presents medium risk level. The extension is analyzed for malware patterns, secret exposure, network communications, permissions, and supply chain vulnerabilities.

How is the security score calculated?

Risky Plugins calculates security scores using weighted categories: severity of findings (25 points max), malware detections (35 points), secret exposure (28 points), network communications (10 points), and obfuscation (10 points). Scores range from 0-100, with higher scores indicating greater risk.

What does CRITICAL, HIGH, MEDIUM, LOW, MINIMAL risk mean?

CRITICAL (80-100): Severe security issues like malware. HIGH (60-79): Significant vulnerabilities. MEDIUM (40-59): Moderate security concerns. LOW (20-39): Minor issues. MINIMAL (0-19): Very low risk. Always review findings before installing any extension.

Is "SVG Wizard" on Firefox Add-ons Safe to Install?

Name: SVG Wizard
Availability: InStock
Rating: 5 (1 reviews)
Author: dragongirlsnout

dragongirlsnout · firefox · v1.1.0

A simple, fast, lightweight extension that adds "Copy SVG Image" and "Save SVG Image" options to the right-click menu. Can be configured to save images as either PNG or JPEG, and can seamlessly upscale saved images.

Risk Assessment

Analyzed

47.87

out of 100

MEDIUM

40 security findings detected across all analyzers

Firefox extension requesting 4 permissions

Severity Breakdown

Critical

High

Medium

Low

Info

Finding Categories

Malware Signatures

Network

IoC Indicators

YARA Rules Matched

3 rules(7 hits)

postinstall file manipulation postinstall file download postinstall system command

Requested Permissions

4 permissions

activeTab

Medium

clipboardWrite

Low

menus

Low

storage

Low

About This Extension

Detailed Findings

8 total

YARA Rule Matches

3 rules

Indicators of Compromise

Network indicators, suspicious strings, and potential IoCs extracted during analysis

URLs

IP Addresses

Domains

Strings

All Indicators · 31

Domain

detected Domain: github.com

XIOC detected Domain: github.com

extracted_from_files

detected IP: ::

XIOC detected IP: ::

extracted_from_files

Hash

detected MD5 Hash: 133087c84c440693a6d02e8bb306227b

XIOC detected MD5 Hash: 133087c84c440693a6d02e8bb306227b

extracted_from_files

Domain

detected Domain: tab.id

XIOC detected Domain: tab.id

extracted_from_files

Domain

detected Domain: link.click

XIOC detected Domain: link.click

extracted_from_files

URL

detected URL: http://addons.mozilla.org/ca/crl.pem0N

XIOC detected URL: http://addons.mozilla.org/ca/crl.pem0N

extracted_from_files

URL

detected URL: https://floofy.tech/@starlight

XIOC detected URL: https://floofy.tech/@starlight

extracted_from_files

URL

detected URL: http://www.w3.org/2000/svg

XIOC detected URL: http://www.w3.org/2000/svg

extracted_from_files

detected IP: d::d

XIOC detected IP: d::d

extracted_from_files

URL

detected URL: https://github.com/enchanted-sword/SVG-Wizard/issues

XIOC detected URL: https://github.com/enchanted-sword/SVG-Wizard/issues

extracted_from_files

Domain

detected Domain: content-signature.mozilla.org

XIOC detected Domain: content-signature.mozilla.org

extracted_from_files

Domain

detected Domain: tb28d8cdf53fa6c24bd9cd08630415c50.133087c84c440693a6d02e8bb306227b.addons.mozilla.org

XIOC detected Domain: tb28d8cdf53fa6c24bd9cd08630415c50.133087c84c440693a6d02e8bb306227b.addons.mozilla.org

extracted_from_files

Domain

detected Domain: c.dj

XIOC detected Domain: c.dj

extracted_from_files

Domain

detected Domain: floofy.tech

XIOC detected Domain: floofy.tech

extracted_from_files

Domain

detected Domain: www.w3.org

XIOC detected Domain: www.w3.org

extracted_from_files

URL

detected URL: https://tailwindcss.com*/*,:after,:before

XIOC detected URL: https://tailwindcss.com*/*,:after,:before

extracted_from_files

Domain

detected Domain: tailwindcss.com

XIOC detected Domain: tailwindcss.com

extracted_from_files

detected IP: ea::

XIOC detected IP: ea::

extracted_from_files

detected IP: 100::

XIOC detected IP: 100::

extracted_from_files

detected IP: 700::

XIOC detected IP: 700::

extracted_from_files

detected IP: e::

XIOC detected IP: e::

extracted_from_files

Domain

detected Domain: signingca1.addons.mozilla.org

XIOC detected Domain: signingca1.addons.mozilla.org

extracted_from_files

Domain

detected Domain: mozilla.com

XIOC detected Domain: mozilla.com

extracted_from_files

Domain

detected Domain: addons.mozilla.org

XIOC detected Domain: addons.mozilla.org

extracted_from_files

detected IP: 74::

XIOC detected IP: 74::

extracted_from_files

URL

detected URL: https://github.com/enchanted-sword/SVG-Wizard

XIOC detected URL: https://github.com/enchanted-sword/SVG-Wizard

extracted_from_files

detected IP: 74::47

XIOC detected IP: 74::47

extracted_from_files

detected IP: 34::4

XIOC detected IP: 34::4

extracted_from_files

detected IP: 7d::d7

XIOC detected IP: 7d::d7

extracted_from_files

detected IP: 9::9

XIOC detected IP: 9::9

extracted_from_files

detected IP: ::bac

XIOC detected IP: ::bac

extracted_from_files

Security Analysis Summary

Security Analysis Overview

SVG Wizard is a Firefox Add-ons extension published by dragongirlsnout. Version 1.1.0 has been analyzed by the Risky Plugins security platform, receiving a risk score of 47.87/100 (MEDIUM risk) based on 40 security findings.

Risk Assessment

This extension presents moderate security risk. Several findings were detected that may warrant attention. Users should carefully review the permissions and findings before installation.

Findings Breakdown

High: 7 finding(s)
Medium: 33 finding(s)

What Was Analyzed

The security assessment covers multiple analysis categories:

Malware Detection: YARA rule matching against 2,400+ malware signatures
Secret Detection: Scanning for exposed API keys, tokens, and credentials
Static Analysis: Code-level security analysis for common vulnerability patterns
Network Analysis: Detection of suspicious network communications and endpoints
Obfuscation Detection: Identification of code obfuscation techniques

Developer Information

SVG Wizard is published by dragongirlsnout on the Firefox Add-ons marketplace. The extension has approximately 79 users.

Recommendation

Exercise caution with this extension. Review the detailed findings and ensure the requested permissions align with the extension's stated functionality before installation.

Source Code Viewer

Source Code Not Available

Source code is not available for this version of the extension.

Frequently Asked Questions

Similar Extensions

Related extensions from the same publisher or marketplace

Tailfeather

dragongirlsnout

CRITICAL 5 users

Dashboard Plus

dragongirlsnout

CRITICAL 7K users

CHUtils

dragongirlsnout

CRITICAL 80 users

CHUtils

dragongirlsnout

CRITICAL 107 users

SVG Wizard

dragongirlsnout

HIGH 75 users

DM Developer

Jimmy Pautz

CRITICAL 6 users

Risk Assessment

Severity Breakdown

Finding Categories

YARA Rules Matched

Requested Permissions

About This Extension

Detailed Findings

NET-FETCH-background.js-67

YARA Rule Matches

postinstall file manipulation

postinstall file download

postinstall system command

Indicators of Compromise

All Indicators · 31

Security Analysis Summary

Security Analysis Overview

Risk Assessment

Findings Breakdown

What Was Analyzed

Developer Information

Recommendation

Frequently Asked Questions

Similar Extensions

Tailfeather

Dashboard Plus

CHUtils

CHUtils

SVG Wizard

DM Developer