Is Solitaire Card Games safe?
We analyzed Solitaire Card Games version 2.0's actual code and gave it a 96/100 trust score. This appears to be a narrowly scoped solitaire launcher with…
Bottom line
This appears to be a narrowly scoped solitaire launcher with no meaningful evidence of misuse.
What it can access
It requests no browser or website access, and only opens its fixed game site after a click, matching its solitaire purpose.[Q1][Q6][Q8]
Security weaknesses
No meaningful security weakness was found: the package uses fixed readable code and lacks remote-code execution or website messaging.[Q7][Q10][Q11][Q21]
Signs of misuse
No evidence shows tracking, sensitive-data collection, or hidden actions; the only outside navigation is a fixed game link chosen by the user.[Q6][Q8][Q12][Q14]
Code findings
What access does this extension ask for, and does that access make sense for what it claims to do?
No evidence of this behavior was found in the reviewed package.
The permissions array is empty and no host_permissions entry exists. — manifest.json:3
Which websites can it run on, and can it read or change what appears on those pages?
No evidence of this behavior was found in the reviewed package.
Defines only an extension-owned action popup. — manifest.json:3
Can it see sensitive information you type, such as passwords, payment details, messages, or form entries?
No evidence of this behavior was found in the reviewed package.
Requests no website access or data permissions. — manifest.json:3
Can it access private browser data such as cookies, signed-in sessions, browsing history, bookmarks, or downloads?
No evidence of this behavior was found in the reviewed package.
Requests none of the corresponding browser permissions. — manifest.json:3
Can it access anything else on your device, such as files, location, camera, microphone, clipboard, or installed applications?
No evidence of this behavior was found in the reviewed package.
The permissions array is empty. — manifest.json:3
Does it send information outside your browser? If so, what information is sent, where does it go, and why?
It opens a fixed solitaire-games-free.com game URL with a source=chrome_extension label. No background data transmission was found.
Builds links only from the fixed game-site base URL and packaged game names. — app.js:1-20
Adds the fixed source label when the user clicks a game. — app.js:31-35
Does it download or run code, settings, or instructions supplied by a remote server?
No evidence of this behavior was found in the reviewed package.
Contains only fixed popup rendering and tab-opening logic with no network fetch. — app.js:1-36
Can it take actions without a clear user request, such as opening pages, redirecting searches, downloading files, or sending requests?
No evidence of this behavior was found in the reviewed package.
chrome.tabs.create is inside the popup click handler. — app.js:31-35
Can it change important browser settings, including your proxy, search engine, homepage, privacy settings, or other extensions?
No evidence of this behavior was found in the reviewed package.
Requests no settings-related permission. — manifest.json:3
Is any important behavior difficult to inspect because the code is hidden, heavily obfuscated, dynamically generated, or supplied by third parties?
No evidence of this behavior was found in the reviewed package.
The complete application logic is readable in one small file. — app.js:1-36
Does it use eval(), new Function(), or string-based timers to turn text into executable code?
No evidence of this behavior was found in the reviewed package.
Uses ordinary functions and fixed template rendering only. — app.js:1-36
Does it track the websites, pages, searches, or links you visit?
No evidence of this behavior was found in the reviewed package.
Has no tabs, history or site access. — manifest.json:3
Does it create a persistent ID or browser fingerprint to recognize you?
No evidence of this behavior was found in the reviewed package.
Appends only the constant source=chrome_extension value. — app.js:31-35
Does it send cookies, session details, authentication data, or page contents elsewhere?
No evidence of this behavior was found in the reviewed package.
Requests no cookies or host permission and defines no content script. — manifest.json:3
Does it record typing, form entries, clipboard contents, or screenshots?
No evidence of this behavior was found in the reviewed package.
Handles only clicks on its own game links. — app.js:1-36
Can a website or remote server send commands that make the extension take actions?
No evidence of this behavior was found in the reviewed package.
Declares no external messaging or content-script bridge. — manifest.json:3
Does it alter links, referral codes, advertisements, shopping carts, or search results?
No evidence of this behavior was found in the reviewed package.
Renders a fixed array of game names and fixed-site links into the extension popup. — app.js:2-29
Does it redirect or modify web traffic, request headers, downloads, or proxy settings?
No evidence of this behavior was found in the reviewed package.
Requests no network-control permissions. — manifest.json:3
Can it communicate with software on the computer or services running on localhost?
No evidence of this behavior was found in the reviewed package.
Requests no native messaging or localhost access. — manifest.json:3
Does it decode, decrypt, or unpack hidden data and then execute or inject it?
No evidence of this behavior was found in the reviewed package.
All executable behavior is fixed packaged JavaScript. — app.js:1-36
Can ordinary websites access privileged extension features through messaging or exposed files?
No evidence of this behavior was found in the reviewed package.
Declares no content script, web-accessible resource or externally_connectable entry. — manifest.json:3
Does suspicious behavior activate only for certain users, websites, dates, or remote settings?
No evidence of this behavior was found in the reviewed package.
Always presents the same fixed game list and click behavior. — app.js:1-36
Does it perform hidden resource-intensive work, such as cryptocurrency mining?
No evidence of this behavior was found in the reviewed package.
Only renders nine links and handles clicks. — app.js:1-36
Does it change form fields or where a form sends its information?
No evidence of this behavior was found in the reviewed package.
Has no webpage access. — manifest.json:3