Is "reFrame — Communication Ally" on Chrome Web Store Safe to Install?

[email protected] · chrome · v1.2.0

reFrame is your communication ally — an AI-powered tool that helps you communicate with dignity in every relationship. How it works: Right-click any text on any webpage to instantly analyze it. reFrame uses Communication Pattern Intelligence (CPI™) to detect toxic communication patterns like gaslighting, contempt, stonewalling, and manipulation — grounded in 40 years of Gottman Institute research. Two-way analysis: Outbound: About to send a heated message? reFrame detects harmful patterns (criticism, contempt, defensiveness) and offers a healthier alternative that preserves your voice and your point — just without the damage. Inbound: Received a message that feels off? reFrame validates your instincts by identifying manipulation tactics like gaslighting, guilt-tripping, and blame-shifting. You're not crazy. The pattern is real. What makes reFrame different: Detects BOTH toxic AND healthy communication patterns (Gottman Antidotes) Relationship-aware analysis across 12 relationship types (partner, parent-child, manager, colleague, and more) Preserves your authentic voice — reframes sound like YOU, not a robot Non-judgmental: "We detected contempt in your message" — not "You're being contemptuous" Works anonymously — no account required Built on the R³ Framework™: Every reframe is grounded in three principles: Regulated (calm, not reactive), Respectful (dignity for everyone), Repairable (keeps the door open for resolution). Free to use. Built by WEreFrame LLC. Learn more at wereframe.com

Risk Assessment

Analyzed
84.76
out of 100
HIGH

80 security findings detected across all analyzers

Chrome extension requesting 5 permissions

Severity Breakdown

0
Critical
32
High
48
Medium
0
Low
0
Info

Finding Categories

31
Malware Signatures
1
Obfuscation
4
Network
44
IoC Indicators

YARA Rules Matched

8 rules(31 hits)
postinstall network communication postinstall file download postinstall system command postinstall registry modification NoUseWeakRandom postinstall obfuscation postinstall crypto operations postinstall file manipulation

Requested Permissions

5 permissions
activeTab
Medium
contextMenus
Low
sidePanel
Low
storage
Low
https://wereframe.com/*
Low

About This Extension

reFrame is your communication ally — an AI-powered tool that helps you communicate with dignity in every relationship. How it works: Right-click any text on any webpage to instantly analyze it. reFrame uses Communication Pattern Intelligence (CPI™) to detect toxic communication patterns like gaslighting, contempt, stonewalling, and manipulation — grounded in 40 years of Gottman Institute research. Two-way analysis: Outbound: About to send a heated message? reFrame detects harmful patterns (criticism, contempt, defensiveness) and offers a healthier alternative that preserves your voice and your point — just without the damage. Inbound: Received a message that feels off? reFrame validates your instincts by identifying manipulation tactics like gaslighting, guilt-tripping, and blame-shifting. You're not crazy. The pattern is real. What makes reFrame different: Detects BOTH toxic AND healthy communication patterns (Gottman Antidotes) Relationship-aware analysis across 12 relationship types (partner, parent-child, manager, colleague, and more) Preserves your authentic voice — reframes sound like YOU, not a robot Non-judgmental: "We detected contempt in your message" — not "You're being contemptuous" Works anonymously — no account required Built on the R³ Framework™: Every reframe is grounded in three principles: Regulated (calm, not reactive), Respectful (dignity for everyone), Repairable (keeps the door open for resolution). Free to use. Built by WEreFrame LLC. Learn more at wereframe.com

Detailed Findings

36 total

YARA Rule Matches

8 rules

Indicators of Compromise

Network indicators, suspicious strings, and potential IoCs extracted during analysis

URLs
14
IP Addresses
3
Domains
28
Strings
44

All Indicators · 44

Domain
detected Domain: wereframe.com

XIOC detected Domain: wereframe.com

extracted_from_files

Domain
detected Domain: web.roblox.com

XIOC detected Domain: web.roblox.com

extracted_from_files

URL
detected URL: https://www.roblox.com/*',

XIOC detected URL: https://www.roblox.com/*',

extracted_from_files

URL
detected URL: https://roblox.com/*',

XIOC detected URL: https://roblox.com/*',

extracted_from_files

URL
detected URL: https://web.roblox.com/*',

XIOC detected URL: https://web.roblox.com/*',

extracted_from_files

URL
detected URL: https://clients2.google.com/service/update2/crx

XIOC detected URL: https://clients2.google.com/service/update2/crx

extracted_from_files

URL
detected URL: https://wereframe.com/*

XIOC detected URL: https://wereframe.com/*

extracted_from_files

URL
detected URL: https://wereframe.com',

XIOC detected URL: https://wereframe.com',

extracted_from_files

Domain
detected Domain: www.rainn.org

XIOC detected Domain: www.rainn.org

extracted_from_files

Domain
detected Domain: www.childhelp.org

XIOC detected Domain: www.childhelp.org

extracted_from_files

Domain
detected Domain: www.thetrevorproject.org

XIOC detected Domain: www.thetrevorproject.org

extracted_from_files

Domain
detected Domain: www.crisistextline.org

XIOC detected Domain: www.crisistextline.org

extracted_from_files

Domain
detected Domain: btn.dataset.feedback

XIOC detected Domain: btn.dataset.feedback

extracted_from_files

Domain
detected Domain: data.safety

XIOC detected Domain: data.safety

extracted_from_files

IP
detected Domain: cybertipline.org

XIOC detected Domain: cybertipline.org

extracted_from_files

Domain
detected Domain: sentinelalerts.map

XIOC detected Domain: sentinelalerts.map

extracted_from_files

Domain
detected Domain: clients2.google.com

XIOC detected Domain: clients2.google.com

extracted_from_files

URL
detected URL: https://www.crisistextline.org'

XIOC detected URL: https://www.crisistextline.org'

extracted_from_files

Domain
detected Domain: www.eeoc.gov

XIOC detected Domain: www.eeoc.gov

extracted_from_files

Domain
detected Domain: 988lifeline.org

XIOC detected Domain: 988lifeline.org

extracted_from_files

Domain
detected Domain: www.loveisrespect.org

XIOC detected Domain: www.loveisrespect.org

extracted_from_files

Domain
detected Domain: adapter.id

XIOC detected Domain: adapter.id

extracted_from_files

Domain
detected Domain: adapter.name

XIOC detected Domain: adapter.name

extracted_from_files

Domain
detected Domain: config.storage

XIOC detected Domain: config.storage

extracted_from_files

Domain
detected Domain: keys.guardian

XIOC detected Domain: keys.guardian

extracted_from_files

Domain
detected Domain: result.guardian

XIOC detected Domain: result.guardian

extracted_from_files

Domain
detected Domain: iter.next

XIOC detected Domain: iter.next

extracted_from_files

Domain
detected Domain: performance.now

XIOC detected Domain: performance.now

extracted_from_files

Domain
detected Domain: date.now

XIOC detected Domain: date.now

extracted_from_files

Domain
detected Domain: chrome.sidepanel.open

XIOC detected Domain: chrome.sidepanel.open

extracted_from_files

Domain
detected Domain: tab.id

XIOC detected Domain: tab.id

extracted_from_files

Domain
detected Domain: www.roblox.com

XIOC detected Domain: www.roblox.com

extracted_from_files

Domain
detected Domain: roblox.com

XIOC detected Domain: roblox.com

extracted_from_files

IP
detected Email: [email protected]

XIOC detected Email: [email protected]

extracted_from_files

Domain
detected Domain: element.id

XIOC detected Domain: element.id

extracted_from_files

URL
detected URL: https://www.eeoc.gov/employees'

XIOC detected URL: https://www.eeoc.gov/employees'

extracted_from_files

URL
detected URL: https://www.thetrevorproject.org'

XIOC detected URL: https://www.thetrevorproject.org'

extracted_from_files

URL
detected URL: https://www.childhelp.org'

XIOC detected URL: https://www.childhelp.org'

extracted_from_files

URL
detected URL: https://www.rainn.org'

XIOC detected URL: https://www.rainn.org'

extracted_from_files

URL
detected URL: https://www.loveisrespect.org'

XIOC detected URL: https://www.loveisrespect.org'

extracted_from_files

URL
detected URL: https://988lifeline.org'

XIOC detected URL: https://988lifeline.org'

extracted_from_files

URL
detected URL: https://www.cybercivilrights.org'

XIOC detected URL: https://www.cybercivilrights.org'

extracted_from_files

IP
detected IP: ea::

XIOC detected IP: ea::

extracted_from_files

Domain
detected Domain: www.cybercivilrights.org

XIOC detected Domain: www.cybercivilrights.org

extracted_from_files

Security Analysis Summary

Security Analysis Overview

reFrame — Communication Ally is a Chrome Web Store extension published by [email protected]. Version 1.2.0 has been analyzed by the Risky Plugins security platform, receiving a risk score of 84.76/100 (HIGH risk) based on 80 security findings.

Risk Assessment

This extension presents critical security risk. Severe issues were detected, potentially including malware indicators, exposed secrets, or dangerous behaviors. Installation is strongly discouraged until these issues are addressed.

Findings Breakdown

  • High: 32 finding(s)
  • Medium: 48 finding(s)

What Was Analyzed

The security assessment covers multiple analysis categories:

  • Malware Detection: YARA rule matching against 2,400+ malware signatures
  • Secret Detection: Scanning for exposed API keys, tokens, and credentials
  • Static Analysis: Code-level security analysis for common vulnerability patterns
  • Network Analysis: Detection of suspicious network communications and endpoints
  • Obfuscation Detection: Identification of code obfuscation techniques

Developer Information

reFrame — Communication Ally is published by [email protected] on the Chrome Web Store marketplace. The extension has approximately 3 users.

Recommendation

This extension is not recommended for installation without thorough manual review. Consider alternatives with lower risk scores, or contact the developer to address the identified security concerns.

Frequently Asked Questions