Is Analytics dark mode safe?
We analyzed Analytics dark mode version 1.1.9's actual code and gave it a 95/100 trust score. This is a narrowly scoped, low-risk visual extension with no…
Bottom line
This is a narrowly scoped, low-risk visual extension with no evidence of data collection or abuse.
What it can access
It affects only Google Analytics pages and uses no browser permissions, matching its dark-mode purpose.[Q1][Q2]
Security weaknesses
No meaningful weakness is shown: the package has no executable code, dynamic code, or exposed privileged feature.[Q10][Q11][Q21]
Signs of misuse
No evidence shows information leaving the browser, remote instructions, or collection of browsing or sign-in data.[Q6][Q7][Q14]
Code findings
What access does this extension ask for, and does that access make sense for what it claims to do?
It has host access only to analytics.google.com and requests no Chrome permissions.
Declares an empty permissions list, one Analytics host, and one CSS-only content script. — manifest.json:12-23
Which websites can it run on, and can it read or change what appears on those pages?
No evidence of this behavior was found in the reviewed package.
Injects only src/analytics.css, with no content script JavaScript. — manifest.json:17-23
Can it see sensitive information you type, such as passwords, payment details, messages, or form entries?
No evidence of this behavior was found in the reviewed package.
Contains no executable content or data-reading permission. — manifest.json:12-23
Can it access private browser data such as cookies, signed-in sessions, browsing history, bookmarks, or downloads?
No evidence of this behavior was found in the reviewed package.
The permissions list is empty and there is no JavaScript. — manifest.json:12-23
Can it access anything else on your device, such as files, location, camera, microphone, clipboard, or installed applications?
No evidence of this behavior was found in the reviewed package.
Requests no relevant permission and loads only CSS. — manifest.json:12-23
Does it send information outside your browser? If so, what information is sent, where does it go, and why?
No evidence of this behavior was found in the reviewed package.
Contains only local style declarations and no url() or @import reference. — src/analytics.css:1-58
Does it download or run code, settings, or instructions supplied by a remote server?
No evidence of this behavior was found in the reviewed package.
Defines no script, service worker, or remote resource. — manifest.json:1-23
Can it take actions without a clear user request, such as opening pages, redirecting searches, downloading files, or sending requests?
The stylesheet applies automatically on Google Analytics pages, which is the advertised behavior.
Automatically injects the packaged stylesheet on analytics.google.com. — manifest.json:17-23
Can it change important browser settings, including your proxy, search engine, homepage, privacy settings, or other extensions?
No evidence of this behavior was found in the reviewed package.
Declares no setting override or related permission. — manifest.json:1-23
Is any important behavior difficult to inspect because the code is hidden, heavily obfuscated, dynamically generated, or supplied by third parties?
No evidence of this behavior was found in the reviewed package.
Uses ordinary readable CSS selectors and declarations. — src/analytics.css:1-58
Does it use eval(), new Function(), or string-based timers to turn text into executable code?
No evidence of this behavior was found in the reviewed package.
Loads only a CSS file. — manifest.json:17-23
Does it track the websites, pages, searches, or links you visit?
No evidence of this behavior was found in the reviewed package.
Uses a fixed analytics.google.com match and no history or tabs permission. — manifest.json:14-23
Does it create a persistent ID or browser fingerprint to recognize you?
No evidence of this behavior was found in the reviewed package.
Contains no executable or network-capable component. — manifest.json:1-23
Does it send cookies, session details, authentication data, or page contents elsewhere?
No evidence of this behavior was found in the reviewed package.
Requests no cookies permission and injects no JavaScript. — manifest.json:12-23
Does it record typing, form entries, clipboard contents, or screenshots?
No evidence of this behavior was found in the reviewed package.
Has no script or relevant permission. — manifest.json:12-23
Can a website or remote server send commands that make the extension take actions?
No evidence of this behavior was found in the reviewed package.
Defines no background process, messaging bridge, or network code. — manifest.json:1-23
Does it alter links, referral codes, advertisements, shopping carts, or search results?
No evidence of this behavior was found in the reviewed package.
Contains the complete set of visual style changes. — src/analytics.css:1-58
Does it redirect or modify web traffic, request headers, downloads, or proxy settings?
No evidence of this behavior was found in the reviewed package.
Defines no network-capable executable component. — manifest.json:1-23
Can it communicate with software on the computer or services running on localhost?
No evidence of this behavior was found in the reviewed package.
Requests no permissions. — manifest.json:12-23
Does it decode, decrypt, or unpack hidden data and then execute or inject it?
No evidence of this behavior was found in the reviewed package.
Contains no remote import or resource URL. — src/analytics.css:1-58
Can ordinary websites access privileged extension features through messaging or exposed files?
No evidence of this behavior was found in the reviewed package.
Defines no JavaScript, messaging handler, or externally_connectable entry. — manifest.json:1-23
Does suspicious behavior activate only for certain users, websites, dates, or remote settings?
No evidence of this behavior was found in the reviewed package.
Restricts access to one site with no permissions and no scripts. — manifest.json:12-23
Does it perform hidden resource-intensive work, such as cryptocurrency mining?
No evidence of this behavior was found in the reviewed package.
The extension consists only of metadata, icons, and a stylesheet. — manifest.json:1-23
Does it change form fields or where a form sends its information?
No evidence of this behavior was found in the reviewed package.
Only visual CSS rules are present. — src/analytics.css:1-58