Is Open with Google Drive™ Viewer safe?
We analyzed Open with Google Drive™ Viewer version 0.50's actual code and gave it a 88/100 trust score. This is a narrowly scoped, purpose-aligned…
Bottom line
This is a narrowly scoped, purpose-aligned extension with minor privacy and unwanted-page-opening concerns.
What it can access
The extension requests only permission to add a context-menu action, which fits its stated purpose. [Q1] When used, it sends the selected link address to Google’s viewer service, which is necessary for the viewing feature but discloses that link to Google. [Q6]
Security weaknesses
It automatically opens the publisher’s information page after installation without a separate user request. [Q8] No downloaded code execution, website control, exposed messaging, or browser-setting changes were found. [Q7]
Signs of misuse
There is no evidence of tracking, collection of passwords or page contents, hidden computation, search manipulation, or remote commands. [Q12] [Q14] [Q16] Sending a user-selected link to Google’s viewer matches the advertised feature. [Q6]
Code findings
What access does this extension ask for, and does that access make sense for what it claims to do?
It requests only contextMenus so it can add a link action.
Manifest V3 declares only the contextMenus permission. — manifest.json:14-17
Which websites can it run on, and can it read or change what appears on those pages?
No evidence of this behavior was found in the reviewed package.
Declares only a service worker and no content_scripts or host_permissions. — manifest.json:4-17
Can it see sensitive information you type, such as passwords, payment details, messages, or form entries?
No evidence of this behavior was found in the reviewed package.
No webpage access is requested. — manifest.json:14-17
Can it access private browser data such as cookies, signed-in sessions, browsing history, bookmarks, or downloads?
No evidence of this behavior was found in the reviewed package.
Only contextMenus is requested. — manifest.json:14-17
Can it access anything else on your device, such as files, location, camera, microphone, clipboard, or installed applications?
No evidence of this behavior was found in the reviewed package.
Requests none of these permissions. — manifest.json:14-17
Does it send information outside your browser? If so, what information is sent, where does it go, and why?
The clicked link URL is sent to Google Docs Viewer as a URL query parameter; the install event opens BrowserNative's site.
Builds https://docs.google.com/viewer?url= from info.linkUrl. — script.js:1-3
Opens the BrowserNative information page on initial installation. — script.js:7-11
Does it download or run code, settings, or instructions supplied by a remote server?
No evidence of this behavior was found in the reviewed package.
All runtime behavior is fixed in the packaged handler. — script.js:1-12
Can it take actions without a clear user request, such as opening pages, redirecting searches, downloading files, or sending requests?
It automatically opens its BrowserNative information page once after installation; document viewing requires a user menu click.
Checks for the install reason before opening the information page. — script.js:7-11
Can it change important browser settings, including your proxy, search engine, homepage, privacy settings, or other extensions?
No evidence of this behavior was found in the reviewed package.
Requests no browser-settings permissions. — manifest.json:14-17
Is any important behavior difficult to inspect because the code is hidden, heavily obfuscated, dynamically generated, or supplied by third parties?
No evidence of this behavior was found in the reviewed package.
Contains plainly named context-menu and installation handlers. — script.js:1-12
Does it use eval(), new Function(), or string-based timers to turn text into executable code?
No evidence of this behavior was found in the reviewed package.
Uses only packaged Chrome event handlers and URL construction. — script.js:1-12
Does it track the websites, pages, searches, or links you visit?
No evidence of this behavior was found in the reviewed package.
Uses the context-menu click's info.linkUrl to construct the viewer URL. — script.js:1-3
Does it create a persistent ID or browser fingerprint to recognize you?
No evidence of this behavior was found in the reviewed package.
Contains no analytics or storage calls. — script.js:1-12
Does it send cookies, session details, authentication data, or page contents elsewhere?
No evidence of this behavior was found in the reviewed package.
Requests no cookies permission or host access. — manifest.json:14-17
Does it record typing, form entries, clipboard contents, or screenshots?
No evidence of this behavior was found in the reviewed package.
Declares no content script or capture permissions. — manifest.json:14-17
Can a website or remote server send commands that make the extension take actions?
No evidence of this behavior was found in the reviewed package.
Declares no externally_connectable or message interface. — manifest.json:4-17
Does it alter links, referral codes, advertisements, shopping carts, or search results?
No evidence of this behavior was found in the reviewed package.
Declares no content script or scripting permission. — manifest.json:4-17
Does it redirect or modify web traffic, request headers, downloads, or proxy settings?
No evidence of this behavior was found in the reviewed package.
Only calls chrome.tabs.create with the viewer URL. — script.js:1-3
Can it communicate with software on the computer or services running on localhost?
No evidence of this behavior was found in the reviewed package.
Requests no nativeMessaging permission. — manifest.json:14-17
Does it decode, decrypt, or unpack hidden data and then execute or inject it?
No evidence of this behavior was found in the reviewed package.
Behavior is fully defined in the packaged service worker. — script.js:1-12
Can ordinary websites access privileged extension features through messaging or exposed files?
No evidence of this behavior was found in the reviewed package.
Declares no content script or externally_connectable entry. — manifest.json:4-17
Does suspicious behavior activate only for certain users, websites, dates, or remote settings?
No evidence of this behavior was found in the reviewed package.
Separates the user click handler from the install-only information-page opener. — script.js:1-10
Does it perform hidden resource-intensive work, such as cryptocurrency mining?
No evidence of this behavior was found in the reviewed package.
Only creates tabs and a context-menu entry. — script.js:1-12
Does it change form fields or where a form sends its information?
No evidence of this behavior was found in the reviewed package.
Declares no content script or scripting permission. — manifest.json:4-17