Transfer of Ownership

Flag items where ownership has been transferred to a different publisher, which may indicate compromise or changes in trustworthiness.

medium

Unverified Publisher

Flags items published by entities that haven’t gone through the publisher verification process of the marketplace. Lack of verification may indicate higher risk, as the publisher’s identity and trustworthiness are unconfirmed.

medium

Low Install Count

Flags items lacking installs on the marketplace, suggesting concerns about the extension's reputation and the publisher's reliability.

low

Extension Purpose and Intention

AmizApp is a Chrome extension designed to enhance WhatsApp Web with CRM-like functionalities. It allows users to manage leads, send mass messages, export contacts, and set reminders, among other features.

Code Functionality

  • Tab Management: The extension communicates with WhatsApp Web tabs to send and receive messages using chrome.tabs.query and chrome.tabs.sendMessage.
chrome.tabs.query({url:e},function(s){s.length>0&&s.forEach(a=>{chrome.tabs.sendMessage(a.id,{action:t,dados:o})})})
  • Local Storage: Utilizes chrome.storage.local to store and retrieve user data such as notifications, contacts, and settings.
chrome.storage.local.get([e],function(s){s[e]===void 0?o():t(s[e])})
  • Alarm Management: Sets up periodic alarms to trigger updates and notifications.
chrome.alarms.create("One_Minute",{periodInMinutes:1})
  • Network Requests: Makes network requests to various backend services for functionalities like transcription and CRM updates.
fetch(u.domSelector)
  • Uninstall and Install Hooks: Sets URLs to be called upon installation and uninstallation of the extension.
chrome.runtime.setUninstallURL(`https://painel.wascript.com.br/api/urls/uninstalURL?id=${chrome.runtime.id}`)

Observations

  • API Calls: The extension makes several API calls to external services for CRM and transcription functionalities.
  • Network Activity: Regularly fetches data from specified URLs to update the extension's features.
  • Data Handling: Manages user data locally without external database storage, as per the extension's description.

Potential Malicious Indicators

  • No Strong Indicators: The code does not exhibit strong indicators of malicious behavior. It primarily focuses on enhancing user experience with WhatsApp Web through legitimate API usage and local data management.

Conclusion

The extension appears to be designed for legitimate CRM functionalities without evident malicious intent.

Compliance

Compliance status and certifications for the extension and its publisher

Extensao.store

The website extensao.store has declared that they achieved ISO 27001 certification in December 2023, confirming their compliance with this standard. There is no indication of a parent company or any mention of its compliance status.

Compliant

Licenses

No license text available...