Cooling signalNo paid features detectedHigh-risk permissions

Gecko

Automated CSPT discovery tool

Users564Current public install base

Rating5.0Store average score

Reviews3Public review volume

Manifest versionV3Extension platform version

7-day growth-12Net users gained this week

7-day growth rate-2.08%Relative weekly velocity

Preview

Gecko Media preview

1 assets

Trend

User growth trend

Review user movement across collected snapshots.

User Growth Over Time

Rating trend

7-day rating trend

View collected rating snapshots from the latest 7-day window to assess rating stability.

7-day rating change

Start

5.00

Latest

5.00

7-day rating change

0.00

2026年7月13日2026年7月19日

Growth overview

Daily, weekly, and monthly growth

Compare 1-day, 7-day, and 30-day net growth and growth rate.

1-day growthDeclining

-7-1.23%

7-day growthDeclining

-12-2.08%

30-day growthDeclining

-20-3.42%

Technical snapshot

Version, languages, and crawl freshness

Review publication date, version, supported languages, and crawl timestamps.

Version1.6.0

ManifestV3

Size706KiB

Languages1English

Published--

Store updated--

Last crawled--

Overview

Product summary

Review the store description, core capabilities, and common use cases.

Gecko is an open-source (https://github.com/vitorfhc/gecko/) powerful Chrome extension designed for web security enthusiasts and professionals. Effortlessly detect client-side path traversal vulnerabilities directly within your browser.

Key Features:

- Comprehensive UI: Clearly view and manage all security findings in one intuitive interface.

- Easy Configuration: Quickly customize detection settings through a convenient popup.

- Real-Time Detection: Automatically intercept HTTP requests to identify client-side path traversals.

- Partial Matching: Supports partial match detection to enhance coverage and precision.

Reviews

Recent review snapshot

Inspect the latest comments and rating distribution.

Store average score5.0Chrome Web Store aggregate rating, including ratings without synced review text

Synced text average5.0Average computed only from synced review bodies below

Reviews with text1Synced review bodies

Total ratings / reviews3Chrome Web Store public rating/review count

Store average score: 5.0. The bars below are calculated from synced review text only, so they may be empty for extensions that have public ratings but no synced comments yet.

5★

4★

3★

2★

1★

ads dawson2025年9月11日

super dope, thank you!

Similar and related extensions

Review related products from the Chrome Web Store detail page.

S3BucketList

Developer Tools

S3BucketList automatically scans network requests made by your browser to detect Amazon S3 bucket URLs

FindSomething

Developer Tools

FreemiumConfidence 64

Find interesting things in the webpage's source code or JavaScript

Caido Extension

Developer Tools

Browser extension to proxy to Caido

rep+

Developer Tools

rep+ - Capture, modify, and replay HTTP requests in Chrome DevTools with AI-powered security analysis.

Endpoint Extractor

Developer Tools

Extracts endpoints from the current page.

Jsmon Extension

Developer Tools

Security Scans on your browser's network history in the background

AI product read

Automated Client-Side Path Traversal (CSPT) vulnerability discovery

Helps web security professionals and enthusiasts detect client-side path traversal vulnerabilities in web applications directly within the browser, without needing external tools.

1. User installs the extension. 2. Extension registers as a DevTools panel. 3. When browsing, the service worker intercepts HTTP requests. 4. It analyzes URLs (query parameters, path segments) against the current page's URL to detect potential client-side path traversal patterns. 5. Findings are stored in local storage and displayed in the DevTools panel UI. 6. Users can configure detection settings via the popup.

Target users: Web security enthusiasts / Security professionals / Web developers

The main JS files (panel.js, popup.js, sw.js) are minified/bundled, making it difficult to trace all logic paths. However, the absence of network request libraries (fetch, axios) and auth-related code in the service worker strongly indicates no external API calls or login requirements.
The extension uses React for UI, which is standard for modern extensions and does not imply paid features.

Monetization

No paid features detected

The extension is described as open-source on GitHub. No payment platforms, subscription logic, or paid feature gating was found in the code. The 'pro' and 'license' keyword matches are from React library license files (react.production.min.js, etc.) and are not related to paid features of the extension itself.

Confidence: 95
Payment platform: --
Source: AI / High
Login required: No
Reason: The extension is a local security scanning tool that intercepts browser requests using webRequest API. It stores settings and findings in local storage. There is no code for authentication, login UI, or external account creation. The extension works entirely offline within the browser context.

Permission risk

High-risk permissions

This estimate uses declared permissions and host permissions to assess access scope and sensitivity.

扩展能力较强：activeTab、webRequest、storage
主机权限覆盖范围较宽

Publisher

Independent publisher

Email: [email protected]
Phone: --
Address: --

Public contact fields are shown above. Developer portfolio pages are available on paid accounts.

View developer portfolio

Permissions

Host access