1) User visits any webpage. 2) Content script checks if page HTML contains wp-content/wp-includes patterns (indicating WordPress). 3) If WordPress detected, background script activates the extension icon. 4) User clicks the icon, popup opens with an iframe to ui.wp-theme-detector.com. 5) Popup retrieves captured page HTML via chrome.storage.session and sends it to the remote UI via Talker.js postMessage. 6) Remote server analyzes the HTML and returns detected theme/plugins displayed in the iframe.

Target users: WordPress developers and designers / Web professionals researching competitor sites / Users curious about WordPress site technology stacks

The actual theme/plugin detection logic runs on the remote server ui.wp-theme-detector.com—the extension is essentially a thin client that captures page HTML and displays remote results
Cannot verify whether the remote service wp-theme-detector.com has its own login or paid features without accessing it
talker.min.js is a third-party library (Talker.js 1.0.1) for iframe postMessage communication—not custom extension code

Monetization

No paid features detected

No paid features, payment logic, subscriptions, or upgrade prompts found in the extension source code. The deterministic heuristic found no payment platform matches. The 'pro' and 'license' keyword hits are false positives: 'pro' appears in base64-encoded verified_contents.json and 'process' in talker.min.js; 'license' is MIT license attribution. The extension gates no features behind a paywall.

Confidence: 85
Payment platform: --
Source: AI / High
Login required: No
Reason: No login flow exists in the extension. The content script detects WordPress sites by checking for wp-content/wp-includes HTML patterns and sends page HTML to the popup. The popup loads an iframe from ui.wp-theme-detector.com and communicates via postMessage (Talker.js). chrome.storage.session is used only for temporary data passing between content script and popup—not for user accounts. No authentication, credentials, or account creation is required to use the core detection workflow.

Permission risk

Medium-risk permissions

This estimate uses declared permissions and host permissions to assess access scope and sensitivity.

扩展能力较强：storage

Publisher

factory-wp.com

Independent publisher

Email: [email protected]
Phone: --
Address: --

Public contact fields are shown above. Developer portfolio pages are available on paid accounts.

View developer portfolio

Permissions

Host access