Previously, the Valorant Discord bot required users to enter their Riot Games username and password directly, which was insecure and did not support two-factor authentication. This extension eliminates that by extracting session cookies from playvalorant.com automatically.

1. User installs extension and uses Valorant Bot's /store command in Discord to link Discord account. 2. User logs into playvalorant.com with their Riot Games account. 3. Extension detects Riot login and displays account info in popup. 4. User consents to cookie sharing and clicks 'リンクする' (Link). 5. Extension reads Riot session cookies (ssid, access_token) and Discord ID, sends them to valobot.net/api/bot/ssid. 6. Bot API processes the link, enabling Valorant bot features for the user's Discord account.

Target users: Valorant players who use the Valorant Bot Discord bot / Discord users who want Valorant game stats/features through the bot

The extension bundles chrome-types node_modules (~2.2MB of TypeScript definitions) which is unusual for a shipped extension and inflates file count
The Riot login detection method (XPath to riotbar-account-dropdown-links) may break if Riot changes their website DOM structure
No privacy policy content was reviewed beyond the Gist URL link in the popup

Monetization

No paid features detected

No evidence of paid features in the extension code. The store description explicitly states '広告も一切無いです！' (No ads at all!) and '広告等も一切無いです！'. No payment APIs, billing logic, subscription checks, premium/upgrade UI, or feature gating found in any source files. The keyword matches for 'paid' are false positives: 'pro' appears only in JavaScript Promise objects, and 'license' appears only in the Apache License header of chrome-types type definitions.

Confidence: 95
Payment platform: --
Source: AI / High
Login required: Yes
Reason: The core workflow requires the user to be logged into two destination services: (1) Discord via the Valorant Bot's /store command to obtain a linked Discord account cookie on valobot.net, and (2) Riot Games account on playvalorant.com. The extension checks for a valid Riot login via DOM element 'riotbar-account-dropdown-links' (content.js:25) and reads Riot session cookies (ssid, access_token) to send to the bot API. If either account is missing, the confirm button is disabled (popup.js:121-125) and the extension cannot complete its linking workflow.

Permission risk

Medium-risk permissions

This estimate uses declared permissions and host permissions to assess access scope and sensitivity.

扩展能力较强：storage、cookies
同时具备浏览数据与站点访问能力

Publisher

Pearlun

Independent publisher

Email: [email protected]
Phone: --
Address: --

Public contact fields are shown above. Developer portfolio pages are available on paid accounts.

View developer portfolio

Permissions

Host access