Is "AI Sidebar Pro" on Chrome Web Store Safe to Install?

[email protected] · chrome · v1.1.0

AI Sidebar Pro brings the power of AI directly to your browser. Open a sleek side panel on any webpage and instantly summarize content, translate text, ask questions about the page, or get context-aware help — without ever leaving your tab. ★ WORKS WITH ALL MAJOR AI PROVIDERS Choose your preferred AI model from a single extension: • OpenAI ChatGPT (GPT-4o, GPT-4, GPT-3.5) • Anthropic Claude (Claude 3.5 Sonnet, Haiku, Opus) • Google Gemini (Gemini 1.5 Pro, Flash) ★ KEY FEATURES • AI Chat Sidebar — persistent panel stays open while you browse • Page Summarization — get the key points of any article in seconds • Smart Selection — highlight text and ask AI about just that section • Translation — translate any page content into your language • Context-Aware Q&A — AI understands the page you're reading • Right-Click AI — select text and ask AI from the context menu • Screenshot Analysis — capture and analyze visual content with AI • Multi-Model Switching — change AI models mid-conversation • Chat History — your conversations are saved locally • Custom System Prompts — personalize AI behavior to your workflow ★ YOUR PRIVACY, PROTECTED Your API keys and chat history are stored only on your device. No data is sent to any server other than the AI provider you choose. AI Sidebar Pro itself never collects or stores your conversations. ★ KEYBOARD SHORTCUTS • Ctrl+Shift+A — Open AI Sidebar • Ctrl+Shift+S — Capture screenshot for analysis Bring AI into every website you visit. Install AI Sidebar Pro today.

Risk Assessment

Analyzed
100
out of 100
CRITICAL

166 security findings detected across all analyzers

Chrome extension requesting 8 permissions

Severity Breakdown

0
Critical
74
High
92
Medium
0
Low
0
Info

Finding Categories

74
Malware Signatures
7
Network
80
IoC Indicators

YARA Rules Matched

9 rules(74 hits)
postinstall crypto operations postinstall file manipulation postinstall network communication postinstall system command postinstall file download postinstall persistence mechanism Cloaked as JPG postinstall obfuscation AlertStatementsShouldNotBeUsed

Requested Permissions

8 permissions
<all_urls>

Access and modify data on every website you visit

Dangerous
activeTab
Medium
tabs
Medium
storage
Low
sidePanel
Low
scripting
Low
contextMenus
Low
tabCapture
Low

About This Extension

AI Sidebar Pro brings the power of AI directly to your browser. Open a sleek side panel on any webpage and instantly summarize content, translate text, ask questions about the page, or get context-aware help — without ever leaving your tab. ★ WORKS WITH ALL MAJOR AI PROVIDERS Choose your preferred AI model from a single extension: • OpenAI ChatGPT (GPT-4o, GPT-4, GPT-3.5) • Anthropic Claude (Claude 3.5 Sonnet, Haiku, Opus) • Google Gemini (Gemini 1.5 Pro, Flash) ★ KEY FEATURES • AI Chat Sidebar — persistent panel stays open while you browse • Page Summarization — get the key points of any article in seconds • Smart Selection — highlight text and ask AI about just that section • Translation — translate any page content into your language • Context-Aware Q&A — AI understands the page you're reading • Right-Click AI — select text and ask AI from the context menu • Screenshot Analysis — capture and analyze visual content with AI • Multi-Model Switching — change AI models mid-conversation • Chat History — your conversations are saved locally • Custom System Prompts — personalize AI behavior to your workflow ★ YOUR PRIVACY, PROTECTED Your API keys and chat history are stored only on your device. No data is sent to any server other than the AI provider you choose. AI Sidebar Pro itself never collects or stores your conversations. ★ KEYBOARD SHORTCUTS • Ctrl+Shift+A — Open AI Sidebar • Ctrl+Shift+S — Capture screenshot for analysis Bring AI into every website you visit. Install AI Sidebar Pro today.

Detailed Findings

82 total

YARA Rule Matches

9 rules

Indicators of Compromise

Network indicators, suspicious strings, and potential IoCs extracted during analysis

URLs
31
IP Addresses
2
Domains
42
Strings
80

All Indicators · 80

Domain
detected Domain: a.id

XIOC detected Domain: a.id

extracted_from_files

IP
detected IP: ::bef

XIOC detected IP: ::bef

extracted_from_files

URL
detected URL: https://generativelanguage.googleapis.com/v1/models?key=YOUR_KEY

XIOC detected URL: https://generativelanguage.googleapis.com/v1/models?key=YOUR_KEY

extracted_from_files

URL
detected URL: https://generativelanguage.googleapis.com/v1beta/models?key=YOUR_KEY

XIOC detected URL: https://generativelanguage.googleapis.com/v1beta/models?key=YOUR_KEY

extracted_from_files

URL
detected URL: https://example.com

XIOC detected URL: https://example.com

extracted_from_files

URL
detected URL: https://platform.openai.com/api-keys)

XIOC detected URL: https://platform.openai.com/api-keys)

extracted_from_files

URL
detected URL: https://console.anthropic.com/settings/keys)

XIOC detected URL: https://console.anthropic.com/settings/keys)

extracted_from_files

URL
detected URL: https://makersuite.google.com/app/apikey)

XIOC detected URL: https://makersuite.google.com/app/apikey)

extracted_from_files

URL
detected URL: https://api.openai.com/v1/models',

XIOC detected URL: https://api.openai.com/v1/models',

extracted_from_files

URL
detected URL: https://imageresizer.com

XIOC detected URL: https://imageresizer.com

extracted_from_files

URL
detected URL: https://www.aconvert.com/image/svg-to-png/

XIOC detected URL: https://www.aconvert.com/image/svg-to-png/

extracted_from_files

URL
detected URL: https://platform.openai.com/api-keys

XIOC detected URL: https://platform.openai.com/api-keys

extracted_from_files

URL
detected URL: https://console.anthropic.com/settings/keys

XIOC detected URL: https://console.anthropic.com/settings/keys

extracted_from_files

URL
detected URL: https://makersuite.google.com/app/apikey

XIOC detected URL: https://makersuite.google.com/app/apikey

extracted_from_files

URL
detected URL: https://api.openai.com/v1/models

XIOC detected URL: https://api.openai.com/v1/models

extracted_from_files

URL
detected URL: https://api.anthropic.com/v1/messages

XIOC detected URL: https://api.anthropic.com/v1/messages

extracted_from_files

URL
detected URL: https://keepachangelog.com/en/1.0.0/)

XIOC detected URL: https://keepachangelog.com/en/1.0.0/)

extracted_from_files

URL
detected URL: https://api.openai.com/v1/chat/completions

XIOC detected URL: https://api.openai.com/v1/chat/completions

extracted_from_files

URL
detected URL: https://generativelanguage.googleapis.com/v1beta/models/

XIOC detected URL: https://generativelanguage.googleapis.com/v1beta/models/

extracted_from_files

URL
detected URL: https://api.openai.com/v1/chat/completions',

XIOC detected URL: https://api.openai.com/v1/chat/completions',

extracted_from_files

URL
detected URL: https://generativelanguage.googleapis.com/v1beta';

XIOC detected URL: https://generativelanguage.googleapis.com/v1beta';

extracted_from_files

Domain
detected Domain: m.id

XIOC detected Domain: m.id

extracted_from_files

Other
detected Email: [email protected]

XIOC detected Email: [email protected]

extracted_from_files

Other
detected Email: [email protected]

XIOC detected Email: [email protected]

extracted_from_files

Other
detected Email: [email protected]

XIOC detected Email: [email protected]

extracted_from_files

Other
detected Email: [email protected]

XIOC detected Email: [email protected]

extracted_from_files

Other
detected Email: [email protected]

XIOC detected Email: [email protected]

extracted_from_files

URL
detected URL: https://example.com/article

XIOC detected URL: https://example.com/article

extracted_from_files

Domain
detected Domain: input.click

XIOC detected Domain: input.click

extracted_from_files

Domain
detected Domain: conv.id

XIOC detected Domain: conv.id

extracted_from_files

Domain
detected Domain: model.id

XIOC detected Domain: model.id

extracted_from_files

Domain
detected Domain: model.name

XIOC detected Domain: model.name

extracted_from_files

Domain
detected Domain: model.vision

XIOC detected Domain: model.vision

extracted_from_files

Domain
detected Domain: data.data

XIOC detected Domain: data.data

extracted_from_files

Domain
detected Domain: data.id

XIOC detected Domain: data.id

extracted_from_files

Domain
detected Domain: clients2.google.com

XIOC detected Domain: clients2.google.com

extracted_from_files

Domain
detected Domain: github.com

XIOC detected Domain: github.com

extracted_from_files

Domain
detected Domain: e.target.dataset.target

XIOC detected Domain: e.target.dataset.target

extracted_from_files

Domain
detected Domain: a.download

XIOC detected Domain: a.download

extracted_from_files

Domain
detected Domain: a.click

XIOC detected Domain: a.click

extracted_from_files

Domain
detected Domain: file.name

XIOC detected Domain: file.name

extracted_from_files

Domain
detected Domain: chrome.sidepanel.open

XIOC detected Domain: chrome.sidepanel.open

extracted_from_files

Domain
detected Domain: sender.tab.id

XIOC detected Domain: sender.tab.id

extracted_from_files

Domain
detected Domain: body.ai

XIOC detected Domain: body.ai

extracted_from_files

Domain
detected Domain: www.w3.org

XIOC detected Domain: www.w3.org

extracted_from_files

Domain
detected Domain: content.parts

XIOC detected Domain: content.parts

extracted_from_files

Domain
detected Domain: date.now

XIOC detected Domain: date.now

extracted_from_files

Domain
detected Domain: index.map

XIOC detected Domain: index.map

extracted_from_files

Domain
detected Domain: makersuite.google.com

XIOC detected Domain: makersuite.google.com

extracted_from_files

Domain
detected Domain: readme.md

XIOC detected Domain: readme.md

extracted_from_files

Domain
detected Domain: updates.md

XIOC detected Domain: updates.md

extracted_from_files

Domain
detected Domain: start.md

XIOC detected Domain: start.md

extracted_from_files

Domain
detected Domain: installation.md

XIOC detected Domain: installation.md

extracted_from_files

Domain
detected Domain: notes.md

XIOC detected Domain: notes.md

extracted_from_files

Domain
detected Domain: changelog.md

XIOC detected Domain: changelog.md

extracted_from_files

Domain
detected Domain: troubleshooting.md

XIOC detected Domain: troubleshooting.md

extracted_from_files

Domain
detected Domain: tab.id

XIOC detected Domain: tab.id

extracted_from_files

Domain
detected Domain: applied.md

XIOC detected Domain: applied.md

extracted_from_files

Domain
detected Domain: imageresizer.com

XIOC detected Domain: imageresizer.com

extracted_from_files

Domain
detected Domain: www.aconvert.com

XIOC detected Domain: www.aconvert.com

extracted_from_files

Domain
detected Domain: platform.openai.com

XIOC detected Domain: platform.openai.com

extracted_from_files

Domain
detected Domain: console.anthropic.com

XIOC detected Domain: console.anthropic.com

extracted_from_files

Domain
detected Domain: example.com

XIOC detected Domain: example.com

extracted_from_files

Domain
detected Domain: keepachangelog.com

XIOC detected Domain: keepachangelog.com

extracted_from_files

Domain
detected Domain: api.openai.com

XIOC detected Domain: api.openai.com

extracted_from_files

Domain
detected Domain: api.anthropic.com

XIOC detected Domain: api.anthropic.com

extracted_from_files

Domain
detected Domain: generativelanguage.googleapis.com

XIOC detected Domain: generativelanguage.googleapis.com

extracted_from_files

Domain
detected Domain: guide.md

XIOC detected Domain: guide.md

extracted_from_files

URL
detected URL: https://clients2.google.com/service/update2/crx

XIOC detected URL: https://clients2.google.com/service/update2/crx

extracted_from_files

URL
detected URL: https://api.openai.com/v1';

XIOC detected URL: https://api.openai.com/v1';

extracted_from_files

URL
detected URL: https://api.anthropic.com/v1';

XIOC detected URL: https://api.anthropic.com/v1';

extracted_from_files

URL
detected URL: http://www.w3.org/2000/svg

XIOC detected URL: http://www.w3.org/2000/svg

extracted_from_files

URL
detected URL: http://example.com

XIOC detected URL: http://example.com

extracted_from_files

URL
detected URL: https://generativelanguage.googleapis.com/v1beta/models?key=$

XIOC detected URL: https://generativelanguage.googleapis.com/v1beta/models?key=$

extracted_from_files

URL
detected URL: https://generativelanguage.googleapis.com/v1/models?key=$

XIOC detected URL: https://generativelanguage.googleapis.com/v1/models?key=$

extracted_from_files

URL
detected URL: https://api.anthropic.com/v1/messages',

XIOC detected URL: https://api.anthropic.com/v1/messages',

extracted_from_files

URL
detected URL: https://github.com/yourusername/ai-sidebar-pro/issues

XIOC detected URL: https://github.com/yourusername/ai-sidebar-pro/issues

extracted_from_files

URL
detected URL: https://github.com/yourusername/ai-sidebar-pro

XIOC detected URL: https://github.com/yourusername/ai-sidebar-pro

extracted_from_files

IP
detected IP: ::

XIOC detected IP: ::

extracted_from_files

URL
detected URL: https://generativelanguage.googleapis.com/v1';

XIOC detected URL: https://generativelanguage.googleapis.com/v1';

extracted_from_files

Security Analysis Summary

Security Analysis Overview

AI Sidebar Pro is a Chrome Web Store extension published by [email protected]. Version 1.1.0 has been analyzed by the Risky Plugins security platform, receiving a risk score of 100/100 (CRITICAL risk) based on 166 security findings.

Risk Assessment

This extension presents critical security risk. Severe issues were detected, potentially including malware indicators, exposed secrets, or dangerous behaviors. Installation is strongly discouraged until these issues are addressed.

Findings Breakdown

  • High: 74 finding(s)
  • Medium: 92 finding(s)

What Was Analyzed

The security assessment covers multiple analysis categories:

  • Malware Detection: YARA rule matching against 2,400+ malware signatures
  • Secret Detection: Scanning for exposed API keys, tokens, and credentials
  • Static Analysis: Code-level security analysis for common vulnerability patterns
  • Network Analysis: Detection of suspicious network communications and endpoints
  • Obfuscation Detection: Identification of code obfuscation techniques

Developer Information

AI Sidebar Pro is published by [email protected] on the Chrome Web Store marketplace. The extension has approximately 5 users.

Recommendation

This extension is not recommended for installation without thorough manual review. Consider alternatives with lower risk scores, or contact the developer to address the identified security concerns.

Frequently Asked Questions

Similar Extensions

Related extensions from the same publisher or marketplace

PageMorph AI

[email protected]

MEDIUM 1 users

TL;DR My Webpage

[email protected]

LOW

Research Notes

[email protected]

CRITICAL 2K users

RoTrade - Roblox Trading Automated

[email protected]

CRITICAL 95 users

PubMed Citation Bar

[email protected]

CRITICAL 545 users

Cover-Letter-AI

[email protected]

CRITICAL