Is 哈基米小帮手 safe to use?

哈基米小帮手 has a security risk score of 39.95/100 (LOW risk). Our security analysis detected 89 findings. Review the detailed security assessment below to understand the specific risks before installation.

What are the security risks of 哈基米小帮手?

Based on our automated security analysis, 哈基米小帮手 presents low risk level. The extension is analyzed for malware patterns, secret exposure, network communications, permissions, and supply chain vulnerabilities.

How is the security score calculated?

Risky Plugins calculates security scores using weighted categories: severity of findings (25 points max), malware detections (35 points), secret exposure (28 points), network communications (10 points), and obfuscation (10 points). Scores range from 0-100, with higher scores indicating greater risk.

What does CRITICAL, HIGH, MEDIUM, LOW, MINIMAL risk mean?

CRITICAL (80-100): Severe security issues like malware. HIGH (60-79): Significant vulnerabilities. MEDIUM (40-59): Moderate security concerns. LOW (20-39): Minor issues. MINIMAL (0-19): Very low risk. Always review findings before installing any extension.

Is "哈基米小帮手" on Chrome Web Store Safe to Install?

[email protected] · chrome · v1.0.6

🚀 哈基米小帮手 - 您的Google AI Studio智能助手专为Google AI Studio设计的浏览器扩展，提供一系列强大功能，显著提升您的AI对话体验。 ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ ✨ 核心功能 📝 强大的提示词管理系统 • 全局提示词：创建和管理可在所有会话中重复使用的提示词模板 • 会话提示词：为特定会话保存专属的上下文信息和角色设定 • 模板系统：预设完整的对话模板，包含系统指令和初始提示词，一键应用到新会话 ⭐ 智能收藏功能 • 一键收藏AI的精彩回复，永久保存有价值的内容 • 支持Markdown格式，完美保留代码块和格式 • 按会话和时间分类管理，当前会话收藏自动置顶 • 快速搜索功能，轻松找到需要的内容 ⚡ 自动追加功能 • 在每条消息末尾自动追加提醒文本，确保AI始终记住重要约束 • 可选时间戳追加，让AI了解当前时间上下文 • 会话级别的独立配置，不同会话可设置不同的追加内容 • 页面内嵌开关控制，随时启用或禁用 🎨 优雅的界面设计 • 采用最新iOS 18设计规范，界面美观专业 • 流畅的动画效果和毛玻璃背景 • 直观的操作体验，无需学习即可上手 • 支持展开/折叠查看长内容 ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 🔧 典型使用场景 📚 知识管理场景当您与AI进行深度对话时，经常会得到一些精彩的回答。通过收藏功能，您可以： • 保存AI生成的代码片段、解决方案 • 整理有价值的知识点和见解 • 建立个人知识库，随时查阅 💼 专业工作场景作为专业用户，您可能需要AI扮演特定角色。通过提示词管理，您可以： • 创建"专业编程助手"、"文案专家"、"数据分析师"等角色模板 • 保存项目相关的背景信息和需求说明 • 快速切换不同的工作上下文 ✍️ 创作场景进行创意写作或内容创作时，通过模板系统，您可以： • 预设小说写作模板，包含人物设定和故事大纲 • 创建文章写作模板，包含结构和风格要求 • 保持创作的连贯性和一致性 🔄 重复任务场景处理重复性任务时，自动追加功能帮您： • 自动提醒AI保持特定的回答风格 • 确保AI遵守既定的规则和约束 • 节省每次手动输入提醒的时间 ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 📌 特色优势 ✅ 零学习成本 • 界面简洁直观，功能一目了然 • 所有操作都有清晰的视觉反馈 • 内置使用提示，快速上手 ✅ 完全本地存储 • 所有数据保存在您的浏览器本地 • 不上传到任何服务器，保护您的隐私 • 无需注册账号，即装即用 ✅ 性能优秀 • 轻量级设计，不影响AI Studio原有性能 • 快速响应，操作流畅 • 占用资源少，稳定可靠 ✅ 持续更新 • 定期添加新功能 • 根据用户反馈优化体验 • 及时适配AI Studio的更新 ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 🌐 语言支持 • 简体中文 - 完整的中文界面和提示 • English - Full English interface support ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 🔐 隐私承诺我们高度重视您的隐私： • 不收集任何个人信息 • 不追踪使用行为 • 不包含任何广告 • 不使用第三方分析服务 • 所有数据仅存储在本地 ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 💡 快速开始 1. 安装插件后，点击浏览器工具栏的插件图标 2. 在"全局提示词"创建您的第一个提示词 3. 在"当前会话"设置自动追加文本 4. 开始与AI对话，体验效率提升 ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 📈 版本更新 v1.0.5 最新版本 • 全新iOS 18设计风格，界面更加美观 • 优化收藏按钮注入稳定性 • 改进自动追加功能 • 完善国际化支持 ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 🎯 为什么选择哈基米小帮手？如果您是AI Studio的重度用户，经常需要： • 管理大量的提示词和上下文信息 • 保存和整理有价值的AI回复 • 在不同项目间切换工作上下文 • 提高与AI对话的效率

Risk Assessment

Analyzed

39.95

out of 100

LOW

89 security findings detected across all analyzers

Chrome extension requesting 6 permissions

Severity Breakdown

Critical

High

Medium

Low

Info

Finding Categories

Malware Signatures

IoC Indicators

YARA Rules Matched

6 rules(21 hits)

postinstall system command NoUseWeakRandom SQLInjection postinstall file manipulation postinstall network communication postinstall crypto operations

Requested Permissions

6 permissions

clipboardRead

Read data from your clipboard

High

activeTab

Medium

storage

Low

scripting

Low

https://aistudio.google.com/*

Low

https://*.aistudio.google.com/*

Low

About This Extension

Detailed Findings

21 total

YARA Rule Matches

6 rules

Indicators of Compromise

Network indicators, suspicious strings, and potential IoCs extracted during analysis

URLs

IP Addresses

Domains

Strings

All Indicators · 67

detected IP: ::af

XIOC detected IP: ::af

extracted_from_files

Domain

detected Domain: readme.md

XIOC detected Domain: readme.md

extracted_from_files

URL

detected URL: https://github.com/yourusername/ai-studio-supercharger.git

XIOC detected URL: https://github.com/yourusername/ai-studio-supercharger.git

extracted_from_files

URL

detected URL: https://github.com/yourusername/ai-studio-supercharger/issues

XIOC detected URL: https://github.com/yourusername/ai-studio-supercharger/issues

extracted_from_files

URL

detected URL: https://github.com/yourusername/ai-studio-supercharger#readme

XIOC detected URL: https://github.com/yourusername/ai-studio-supercharger#readme

extracted_from_files

URL

detected URL: https://aistudio.google.com/*

XIOC detected URL: https://aistudio.google.com/*

extracted_from_files

URL

detected URL: https://aistudio.google.com/)

XIOC detected URL: https://aistudio.google.com/)

extracted_from_files

URL

detected URL: https://favicon.io/)

XIOC detected URL: https://favicon.io/)

extracted_from_files

URL

detected URL: https://realfavicongenerator.net/)

XIOC detected URL: https://realfavicongenerator.net/)

extracted_from_files

URL

detected URL: https://www.canva.com/)

XIOC detected URL: https://www.canva.com/)

extracted_from_files

URL

detected URL: https://clients2.google.com/service/update2/crx

XIOC detected URL: https://clients2.google.com/service/update2/crx

extracted_from_files

Domain

detected Domain: build.sh

XIOC detected Domain: build.sh

extracted_from_files

Domain

detected Domain: release.sh

XIOC detected Domain: release.sh

extracted_from_files

Domain

detected Domain: 上架检查报告.md

XIOC detected Domain: 上架检查报告.md

extracted_from_files

Domain

detected Domain: changelog.md

XIOC detected Domain: changelog.md

extracted_from_files

Domain

detected Domain: policy.md

XIOC detected Domain: policy.md

extracted_from_files

Domain

detected Domain: clients2.google.com

XIOC detected Domain: clients2.google.com

extracted_from_files

detected Domain: 上传hakim-helper-v1.0.5-release.zip

XIOC detected Domain: 上传hakim-helper-v1.0.5-release.zip

extracted_from_files

Domain

detected Domain: textarea.select

XIOC detected Domain: textarea.select

extracted_from_files

Domain

detected Domain: sessiondata.is

XIOC detected Domain: sessiondata.is

extracted_from_files

Domain

detected Domain: favorite.id

XIOC detected Domain: favorite.id

extracted_from_files

detected Domain: hakim-helper-v1.0.5-release.zip

XIOC detected Domain: hakim-helper-v1.0.5-release.zip

extracted_from_files

Domain

detected Domain: prd.md

XIOC detected Domain: prd.md

extracted_from_files

Domain

detected Domain: checklist.md

XIOC detected Domain: checklist.md

extracted_from_files

detected Domain: description.md

XIOC detected Domain: description.md

extracted_from_files

Domain

detected Domain: content.id

XIOC detected Domain: content.id

extracted_from_files

Domain

detected Domain: initialprompts.map

XIOC detected Domain: initialprompts.map

extracted_from_files

Domain

detected Domain: s.id

XIOC detected Domain: s.id

extracted_from_files

Domain

detected Domain: p.id

XIOC detected Domain: p.id

extracted_from_files

Domain

detected Domain: t.id

XIOC detected Domain: t.id

extracted_from_files

Domain

detected Domain: template.auto

XIOC detected Domain: template.auto

extracted_from_files

Domain

detected Domain: f.id

XIOC detected Domain: f.id

extracted_from_files

Domain

detected Domain: sessiondata.prompts.map

XIOC detected Domain: sessiondata.prompts.map

extracted_from_files

Domain

detected Domain: prompt.id

XIOC detected Domain: prompt.id

extracted_from_files

Domain

detected Domain: e.target.dataset.tab

XIOC detected Domain: e.target.dataset.tab

extracted_from_files

Domain

detected Domain: e.target.id

XIOC detected Domain: e.target.id

extracted_from_files

Domain

detected Domain: e.target

XIOC detected Domain: e.target

extracted_from_files

Domain

detected Domain: actionelement.dataset.id

XIOC detected Domain: actionelement.dataset.id

extracted_from_files

Domain

detected Domain: btn.dataset.tab

XIOC detected Domain: btn.dataset.tab

extracted_from_files

detected Domain: snippets.map

XIOC detected Domain: snippets.map

extracted_from_files

detected Domain: snippet.id

XIOC detected Domain: snippet.id

extracted_from_files

Domain

detected Domain: templates.map

XIOC detected Domain: templates.map

extracted_from_files

Domain

detected Domain: template.id

XIOC detected Domain: template.id

extracted_from_files

Domain

detected Domain: favorites.map

XIOC detected Domain: favorites.map

extracted_from_files

Domain

detected Domain: fav.id

XIOC detected Domain: fav.id

extracted_from_files

Domain

detected Domain: sessiondata.auto

XIOC detected Domain: sessiondata.auto

extracted_from_files

Domain

detected Domain: newsessiondata.auto

XIOC detected Domain: newsessiondata.auto

extracted_from_files

Domain

detected Domain: newsessiondata.is

XIOC detected Domain: newsessiondata.is

extracted_from_files

Domain

detected Domain: favicon.io

XIOC detected Domain: favicon.io

extracted_from_files

Domain

detected Domain: realfavicongenerator.net

XIOC detected Domain: realfavicongenerator.net

extracted_from_files

Domain

detected Domain: www.canva.com

XIOC detected Domain: www.canva.com

extracted_from_files

Domain

detected Domain: 截图制作指南.md

XIOC detected Domain: 截图制作指南.md

extracted_from_files

Domain

detected Domain: github.com

XIOC detected Domain: github.com

extracted_from_files

Domain

detected Domain: start.md

XIOC detected Domain: start.md

extracted_from_files

Domain

detected Domain: aistudio.google.com

XIOC detected Domain: aistudio.google.com

extracted_from_files

Domain

detected Domain: install.md

XIOC detected Domain: install.md

extracted_from_files

Domain

detected Domain: collectitem.id

XIOC detected Domain: collectitem.id

extracted_from_files

Domain

detected Domain: copymarkdownbutton.click

XIOC detected Domain: copymarkdownbutton.click

extracted_from_files

Domain

detected Domain: date.now

XIOC detected Domain: date.now

extracted_from_files

Domain

detected Domain: menuitem.id

XIOC detected Domain: menuitem.id

extracted_from_files

detected IP: ::bef

XIOC detected IP: ::bef

extracted_from_files

detected IP: ::

XIOC detected IP: ::

extracted_from_files

detected IP: ea::

XIOC detected IP: ea::

extracted_from_files

detected IP: e::bef

XIOC detected IP: e::bef

extracted_from_files

detected IP: e::af

XIOC detected IP: e::af

extracted_from_files

detected Domain: ai-studio-supercharger.zip

XIOC detected Domain: ai-studio-supercharger.zip

extracted_from_files

URL

detected URL: https://*.aistudio.google.com/*

XIOC detected URL: https://*.aistudio.google.com/*

extracted_from_files

Security Analysis Summary

Security Analysis Overview

哈基米小帮手 is a Chrome Web Store extension published by [email protected]. Version 1.0.6 has been analyzed by the Risky Plugins security platform, receiving a risk score of 39.95/100 (LOW risk) based on 89 security findings.

Risk Assessment

This extension presents low security risk. Some minor findings were detected, but nothing that would prevent typical usage. Reviewing the detailed findings below is recommended before use in sensitive environments.

Findings Breakdown

High: 21 finding(s)
Medium: 68 finding(s)

What Was Analyzed

The security assessment covers multiple analysis categories:

Malware Detection: YARA rule matching against 2,400+ malware signatures
Secret Detection: Scanning for exposed API keys, tokens, and credentials
Static Analysis: Code-level security analysis for common vulnerability patterns
Network Analysis: Detection of suspicious network communications and endpoints
Obfuscation Detection: Identification of code obfuscation techniques

Developer Information

哈基米小帮手 is published by [email protected] on the Chrome Web Store marketplace. The extension has approximately 18 users.

Recommendation

Exercise caution with this extension. Review the detailed findings and ensure the requested permissions align with the extension's stated functionality before installation.

Source Code Viewer

Source Code Not Available

Source code is not available for this version of the extension.