Is Amazon Quick safe?
We analyzed Amazon Quick version 1.0.12112.0's actual code and gave it a 42/100 trust score. Amazon Quick has broad browsing access and a remotely…
Bottom line
Amazon Quick has broad browsing access and a remotely controlled agent, creating substantial privacy and security risk despite an apparent productivity purpose.
What it can access
It can operate across every HTTPS site and use browser automation, page capture, screenshots, and form interaction for agent tasks [Q1][Q2][Q15][Q16].
Security weaknesses
Remote task messages are forwarded as unrestricted browser-control commands, allowing powerful actions in controlled tabs if the service or session is compromised [Q16][Q20].
Signs of misuse
The package shows service-directed collection of selected page content, attachments, screenshots, and task events, but ties these actions to its stated agent feature [Q6][Q15][Q16].
Code findings
What access does this extension ask for, and does that access make sense for what it claims to do?
It has access to every HTTPS site and privileged tab, scripting, identity, notification, storage, and debugger services.
Declares storage, scripting, tabs, identity, debugger, notifications, alarms, and https://*/* host access. — manifest.json:6-19
Which websites can it run on, and can it read or change what appears on those pages?
It reads pages the user attaches, while the agent mode can capture page structure during a running task.
Fetches the current page for page-aware prompts and attachments. — sidepanel.js:206,474
Forwards DOMSnapshot.captureSnapshot for tabs associated with a UI-agent task. — background.js:1
Can it see sensitive information you type, such as passwords, payment details, messages, or form entries?
User-selected text and attached page content can enter Quick conversations; agent-controlled pages may also contain sensitive form or account data.
Context-menu actions store the selected text, page URL, title, action, and user agent for the side panel. — background.js:1
Sends prompts with selected text, document context, and attachments to the configured Quick service. — sidepanel.js:474
Can it access private browser data such as cookies, signed-in sessions, browsing history, bookmarks, or downloads?
It stores configuration, sign-in, conversations, external interactions, and browser-agent task state in extension storage.
Uses local and managed storage for external interactions, UI settings, Quick configuration, and agent setup. — background.js:1-2
Declares storage permission and a managed-storage schema. — manifest.json:6-15,60-62
Can it access anything else on your device, such as files, location, camera, microphone, clipboard, or installed applications?
The browser agent can capture screenshots, and the product can download generated artifacts; no clipboard access was found.
Explicitly handles Page.captureScreenshot for a task-associated tab. — background.js:1
Provides a user-triggered download for generated screenshot artifacts. — sidepanel.js:495
Does it send information outside your browser? If so, what information is sent, where does it go, and why?
It sends prompts, chosen page content, attachments, agent events, and telemetry to Amazon Quick/AWS services as part of the service.
Builds authenticated Quick service clients, sends prompts and attachments, and records service telemetry. — sidepanel.js:290,315,474
Streams UI-agent commands, events, and responses over authenticated Amazon task connections. — messagePassing.js:43
Does it download or run code, settings, or instructions supplied by a remote server?
Amazon Quick configuration supplies feature flags, regional service services, account details, and browser-agent availability.
Loads QuickSight configuration and feature flags before initializing the browser-agent service. — background.js:1-2
Uses configured regional service endpoints and verifies that the browser extension is allowlisted. — sidepanel.js:290,315
Can it take actions without a clear user request, such as opening pages, redirecting searches, downloading files, or sending requests?
A registered scheduled task can start automatically after a visible notification and a three-second delay.
Handles ui-agent push events, displays 'Scheduled run starting,' waits three seconds, and launches the task. — background.js:1-2
Defaults autoAcquireTasks to enabled and starts new-task push payloads only when a registered subscription and user context exist. — messagePassing.js:43
Can it change important browser settings, including your proxy, search engine, homepage, privacy settings, or other extensions?
No evidence of this behavior was found in the reviewed package.
Does not request browserSettings, proxy, management, or search-provider permissions. — manifest.json:6-19
Is any important behavior difficult to inspect because the code is hidden, heavily obfuscated, dynamically generated, or supplied by third parties?
The package uses large minified production bundles, but minification alone is not evidence of malicious intent.
Contains a large minified application and bundled dependencies with preserved module and feature names. — sidepanel.js:1-495
Does it use eval(), new Function(), or string-based timers to turn text into executable code?
No evidence of this behavior was found in the reviewed package.
Office-specific handlers use eval on tool code, but the build-type switch returns an unsupported-tool processor for chromium, firefox, and edge. — sidepanel.js:301,303,313
Sets BUILD_TYPE to chromium for this package. — messagePassing.js:27
Does it track the websites, pages, searches, or links you visit?
No evidence of this behavior was found in the reviewed package.
Context-menu and omnibox flows capture the current URL/title, while the agent creates and updates task tabs. — background.js:1
Queries active or current-window tabs and exposes their URL metadata for user-selected attachments. — sidepanel.js:206,315
Does it create a persistent ID or browser fingerprint to recognize you?
It uses user, account, session, task, conversation, and telemetry identifiers for the Amazon Quick service.
Registers web push and agent connections with user, task, and session identifiers. — messagePassing.js:43
Includes service user/account attributes and conversation identifiers in API and telemetry operations. — sidepanel.js:290,315
Does it send cookies, session details, authentication data, or page contents elsewhere?
It uses the user's Amazon Quick session and CSRF token for intended service requests; the debugger channel could request cookies from task tabs, but routine cookie collection was not demonstrated.
Quick service requests use credentials include and the configured CSRF token; generic debugger commands are forwarded for task tabs. — background.js:1
Creates authenticated service clients using the configured Quick endpoint and browser session. — sidepanel.js:290,315
Does it record typing, form entries, clipboard contents, or screenshots?
It explicitly supports page screenshots and page snapshots during an agent task; a standalone keylogger was not found.
Special-cases Page.captureScreenshot and filters then returns DOMSnapshot.captureSnapshot output from task tabs. — background.js:1
Can a website or remote server send commands that make the extension take actions?
An authenticated Amazon task service can remotely control tabs inside a dedicated agent window through generic Chrome debugger commands.
Attaches chrome.debugger to task tabs and forwards arbitrary received CDP method and parameter pairs. — background.js:1
Creates the task window, starts an authenticated streaming session, and exchanges CDP commands, responses, and events. — messagePassing.js:43
Does it alter links, referral codes, advertisements, shopping carts, or search results?
No evidence of this behavior was found in the reviewed package.
Injects a floating Quick control on eligible sites and exposes generic debugger operations for task-controlled pages. — background.js:1
Does it redirect or modify web traffic, request headers, downloads, or proxy settings?
It opens authenticated WebSocket streams, uploads attachments, and can navigate agent-controlled tabs; no proxy-setting change was found.
Starts authenticated task streaming sessions and supports tab creation and navigation within the task window. — background.js:1
Builds chat WebSocket URLs and uploads user-selected attachments to Quick services. — sidepanel.js:290,313,315
Can it communicate with software on the computer or services running on localhost?
No evidence of this behavior was found in the reviewed package.
Does not request nativeMessaging or other direct system-integration permissions. — manifest.json:6-19
Does it decode, decrypt, or unpack hidden data and then execute or inject it?
No evidence of this behavior was found in the reviewed package.
Passes a remotely received CDP method and params directly to chrome.debugger.sendCommand without a method allowlist. — background.js:1
Receives the task command stream from the Amazon service and returns CDP responses and browser events. — messagePassing.js:43
Can ordinary websites access privileged extension features through messaging or exposed files?
No evidence of this behavior was found in the reviewed package.
Only a logo is web-accessible, and no externally_connectable entry exposes extension messaging to websites. — manifest.json:63-71
Runtime handlers serve packaged extension content scripts and task state rather than accepting arbitrary messages from page scripts. — background.js:1
Does suspicious behavior activate only for certain users, websites, dates, or remote settings?
No evidence of this behavior was found in the reviewed package.
Initializes UI-agent features only from valid Quick configuration and relevant feature flags. — background.js:1-2
Requires a user context and subscription, supports disabling automatic task acquisition, and isolates task connections by task/window. — messagePassing.js:43
Rejects accounts where the browser-extension capability is not allowlisted. — sidepanel.js:315
Does it perform hidden resource-intensive work, such as cryptocurrency mining?
No evidence of this behavior was found in the reviewed package.
Background behavior implements extension UI, authentication, push, and browser-agent orchestration rather than mining. — background.js:1-2
Does it change form fields or where a form sends its information?
The remote browser agent can edit inputs and submit forms in its task window, but no covert form-action rewrite outside an agent task was demonstrated.
Generic CDP command forwarding gives the authenticated task control over page DOM and input interaction in associated tabs. — background.js:1
Associates controlled tabs with a dedicated task window and streams the agent's commands and page events. — messagePassing.js:43