Is Gemini Usage Meter safe to use?

Gemini Usage Meter has a security risk score of 60.99/100 (MEDIUM risk). Our security analysis detected 64 findings. Review the detailed security assessment below to understand the specific risks before installation.

What are the security risks of Gemini Usage Meter?

Based on our automated security analysis, Gemini Usage Meter presents medium risk level. The extension is analyzed for malware patterns, secret exposure, network communications, permissions, and supply chain vulnerabilities.

How is the security score calculated?

Risky Plugins calculates security scores using weighted categories: severity of findings (25 points max), malware detections (35 points), secret exposure (28 points), network communications (10 points), and obfuscation (10 points). Scores range from 0-100, with higher scores indicating greater risk.

What does CRITICAL, HIGH, MEDIUM, LOW, MINIMAL risk mean?

CRITICAL (80-100): Severe security issues like malware. HIGH (60-79): Significant vulnerabilities. MEDIUM (40-59): Moderate security concerns. LOW (20-39): Minor issues. MINIMAL (0-19): Very low risk. Always review findings before installing any extension.

Chrome Web Store

Gemini Usage Meter

by [email protected]

a98e1015-c382-5bcf-b15a-1272c907ab00 | v1.0.1

MEDIUM risk

Risk verdict

Review before use

Score-based assessment (medium risk, 61/100). No analyst review available.

Analysis record

Analysed: 6 days ago
Version: v1.0.1
Artifact: SHA256 051…E2D
Source: Findings (non-IoC)

Evidence ledger

Ranked by severity · findings with a source location link to the code viewer

32 detail rows

YARA Rule Matches

8 rules

Severity	Rule	Hits	Files	Metadata
LOW	`postinstall persistence mechanism`	1	background.js	-
LOW	`postinstall crypto operations`	1	_metadata/verified_contents.json	-
LOW	`postinstall file manipulation`	4	options/options.jscontent-script.jsbackground.js +1 more	-
LOW	`postinstall environment access`	2	fonts/OFL-Inter.txtfonts/OFL-Poppins.txt	-
LOW	`postinstall network communication`	5	options/options.jscontent-script.jsbackground.js +2 more	-
LOW	`postinstall system command`	7	overlay.cssbackground.jspopup/popup.js +4 more	-
LOW	`postinstall file download`	6	content-script.jsbackground.jspopup/popup.js +3 more	-
LOW	`NoUseWeakRandom`	2	background.jspage-injector.js	-

Network Indicators

Concrete URLs, domains, IPs, emails, and hashes extracted from the analyzed artifact.

32 total

Loading network indicators

IoC detail rows are loaded outside the initial page render.

Publisher Evidence

Limited evidence

[email protected]

Publisher identity, store signals, distribution reach, and warning signals used for context. Treat this as supporting evidence, not a clean bill of health.

Chrome does not expose the same publisher verification data as IDE stores, so this score is deliberately conservative.

Noisy-finding weight

x1.00

Publisher domain

No domain

Missing

Store verification signal

Limited signal

Limited

Extension portfolio

Portfolio

13 evidence rows available.

Finding Categories

Network

IoC Indicators

YARA Rules Matched

8 rules(28 hits)

postinstall persistence mechanism postinstall crypto operations postinstall file manipulation postinstall environment access postinstall network communication postinstall system command postinstall file download NoUseWeakRandom

Requested Permissions

6 permissions

tabs

Medium

storage

Low

alarms

Low

notifications

Low

declarativeNetRequestWithHostAccess

Low

https://gemini.google.com/*

Low

Security Analysis Summary

Security Analysis Overview

Gemini Usage Meter is a Chrome Web Store extension published by [email protected]. Version 1.0.1 has been analyzed by the Risky Plugins security platform, receiving a risk score of 60.99/100 (MEDIUM risk) based on 64 security findings.

Risk Assessment

This extension presents moderate security risk. Several findings were detected that may warrant attention. Users should carefully review the permissions and findings before installation.

Findings Breakdown

Medium: 36 finding(s)
Low: 28 finding(s)

What Was Analyzed

The security assessment covers multiple analysis categories:

Malware Detection: YARA rule matching against 2,400+ malware signatures
Secret Detection: Scanning for exposed API keys, tokens, and credentials
Static Analysis: Code-level security analysis for common vulnerability patterns
Network Analysis: Detection of suspicious network communications and endpoints
Obfuscation Detection: Identification of code obfuscation techniques

Developer Information

Gemini Usage Meter is published by [email protected] on the Chrome Web Store marketplace.

Recommendation

This extension is not recommended for installation without thorough manual review. Consider alternatives with lower risk scores, or contact the developer to address the identified security concerns.

Source Code Viewer

Source Code Not Available

Source code is not available for this version of the extension.

About This Extension

Real time Gemini usage tracker. See your 5-hour and weekly limits, reset times and chat size, just above the Gemini chatbox. Steps to use- 1. Install the extension 2. Open gemini.google.com and the usage strip appears automatically just above the chatbox. That’s all. REQUIREMENTS- Sign in to gemini.google.com in the same browser profile. Works with no plan, Google AI Plus, Pro and Ultra. Workspace accounts that Gemini meters per feature see their tightest limit instead. Gemini Usage Meter FEATURES: 1. Display Gemini usage and reset time just above the Gemini chat box. 2. A subtle strip above the Gemini composer shows live 5-hour and weekly progress as you chat 3. Limit forecast: warns “~40m left” when your pace will hit the limit before it resets 4. Chat size in tokens against your plan’s context window, so you know when to start a new chat 5. Shows your current mode (Fast, Thinking or Pro) 6. Toolbar popup with progress bars, reset countdowns, and quick controls Usage badge on the toolbar icon 7. Desktop notifications at thresholds you choose (75%, 90%, 100%, or any %) 8. Configurable refresh interval (1–60 minutes) 9. Adapts to narrow windows, collapses to a compact view, follows Gemini’s light and dark theme It’s an open source tool and the source code can be found here: https://github.com/SelectorsHub/Gemini-Usage-Meter PRIVACY- The extension talks only to gemini.google.com using your existing browser session. It reads the same internal usage data that Gemini’s own Usage limits page uses. Nothing leaves your browser. No telemetry, no analytics, no remote servers. Support: Questions or feedback? Contact us at [email protected]