Is "Google Calendar manager" on Chrome Web Store Safe to Install?
Simple extension to simplify creation of events in your calendar
Risk Assessment
Analyzed37 security findings detected across all analyzers
Chrome extension requesting 6 permissions
Severity Breakdown
Finding Categories
YARA Rules Matched
5 rules(11 hits)Requested Permissions
6 permissionsAccess your identity and sign-in tokens
About This Extension
Detailed Findings
16 totalYARA Rule Matches
5 rulesIndicators of Compromise
Network indicators, suspicious strings, and potential IoCs extracted during analysis
All Indicators · 20
detected IP: :: XIOC detected IP: ::
extracted_from_files
detected URL: https://www.googleapis.com/calendar/v3/users/me/calendarList'; XIOC detected URL: https://www.googleapis.com/calendar/v3/users/me/calendarList';
extracted_from_files
detected URL: https://www.googleapis.com/calendar/v3/calendars'; XIOC detected URL: https://www.googleapis.com/calendar/v3/calendars';
extracted_from_files
detected URL: https://www.googleapis.com/calendar/v3/calendars/$ XIOC detected URL: https://www.googleapis.com/calendar/v3/calendars/$
extracted_from_files
detected URL: https://clients2.google.com/service/update2/crx XIOC detected URL: https://clients2.google.com/service/update2/crx
extracted_from_files
detected URL: https://calendar.google.com/calendar XIOC detected URL: https://calendar.google.com/calendar
extracted_from_files
detected Domain: 895890072224-ds0mb5p7uguj02obkgluui53ku28ove0.apps.googleusercontent.com XIOC detected Domain: 895890072224-ds0mb5p7uguj02obkgluui53ku28ove0.apps.googleusercontent.com
extracted_from_files
detected Domain: calendar.google.com XIOC detected Domain: calendar.google.com
extracted_from_files
detected Domain: event.end.date XIOC detected Domain: event.end.date
extracted_from_files
detected Domain: a.email XIOC detected Domain: a.email
extracted_from_files
detected Domain: res.data XIOC detected Domain: res.data
extracted_from_files
detected URL: https://www.googleapis.com/auth/calendar XIOC detected URL: https://www.googleapis.com/auth/calendar
extracted_from_files
detected Domain: request.data XIOC detected Domain: request.data
extracted_from_files
detected Domain: www.googleapis.com XIOC detected Domain: www.googleapis.com
extracted_from_files
detected Domain: gccecalendar.id XIOC detected Domain: gccecalendar.id
extracted_from_files
detected Domain: event.start.date XIOC detected Domain: event.start.date
extracted_from_files
detected Domain: tab.id XIOC detected Domain: tab.id
extracted_from_files
detected Domain: clients2.google.com XIOC detected Domain: clients2.google.com
extracted_from_files
detected Domain: identity.email XIOC detected Domain: identity.email
extracted_from_files
detected Domain: event.attendees.map XIOC detected Domain: event.attendees.map
extracted_from_files
Security Analysis Summary
Security Analysis Overview
Google Calendar manager is a Chrome Web Store extension published by [email protected]. Version 0.0.1 has been analyzed by the Risky Plugins security platform, receiving a risk score of 84.99/100 (HIGH risk) based on 37 security findings.
Risk Assessment
This extension presents critical security risk. Severe issues were detected, potentially including malware indicators, exposed secrets, or dangerous behaviors. Installation is strongly discouraged until these issues are addressed.
Findings Breakdown
- High: 11 finding(s)
- Medium: 26 finding(s)
What Was Analyzed
The security assessment covers multiple analysis categories:
- Malware Detection: YARA rule matching against 2,400+ malware signatures
- Secret Detection: Scanning for exposed API keys, tokens, and credentials
- Static Analysis: Code-level security analysis for common vulnerability patterns
- Network Analysis: Detection of suspicious network communications and endpoints
- Obfuscation Detection: Identification of code obfuscation techniques
Developer Information
Google Calendar manager is published by [email protected] on the Chrome Web Store marketplace.
Recommendation
This extension is not recommended for installation without thorough manual review. Consider alternatives with lower risk scores, or contact the developer to address the identified security concerns.
Source Code Not Available
Source code is not available for this version of the extension.
Frequently Asked Questions
Similar Extensions
Related extensions from the same publisher or marketplace
BrowserChat
[email protected]
Send to NotebookLM
[email protected]
Chat AI - Chat GPT 5 on all sites
[email protected]
SensePage
[email protected]
Auto Gmail - ChatGPT AI for email inbox
[email protected]
Page Locker
[email protected]