Bahamut users earn virtual currency (巴幣) by signing in daily, but forgetting to sign in means losing rewards. This extension automates the daily sign-in process and auto-claims double coin rewards by watching ads, ensuring users never miss a day.

1. User configures sign-in time in extension popup (options.html). 2. Chrome alarm fires at scheduled time → background.js opens Bahamut page in a background tab (default: home.gamer.com.tw/homeindex.php). 3. content.js injects webContent.js into the Bahamut page. 4. webContent.js triggers Bahamut's Signin.signinWork() to complete sign-in. 5. If autoDouble is enabled, it automates the ad-watching flow to claim double coins. 6. If autoDestroy is enabled, the background tab is closed after completion. 7. If user is not logged in and autoLogin is enabled, login.js fills credentials on the login page.

Target users: Bahamut (巴哈姆特) gaming community members who want to collect daily login rewards consistently

Source code is minified/webpack-bundled, making exact line-by-line analysis harder but the logic is still traceable
Cannot confirm if the Google Analytics tracking (measurement ID G-NX79VZYHXW) collects any user-identifiable data beyond anonymous client IDs

Monetization

No paid features detected

No evidence of paid features, subscriptions, or payment gating within the extension. All features (scheduled sign-in, auto double coins, auto-login, auto-close tab) are freely available. The 'pro' keyword hits in static scan are from minified code fragments (not premium/subscription references) and CSS library license comments. The extension is open-source on GitHub. The destination service (Bahamut) has its own 'VIP' membership system, but the extension does not gate any features based on Bahamut VIP status.

Confidence: 95
Payment platform: --
Source: AI / High
Login required: Needs review
Reason: The extension automates daily sign-in (簽到) on Bahamut (gamer.com.tw). The user must be logged into a Bahamut account for the sign-in to work. The extension includes an optional auto-login feature (disabled by default) that stores Bahamut credentials locally and auto-fills the login form at user.gamer.com.tw/login.php. In webContent.js, it checks `document.cookie.includes('BAHAID=')` to detect login status and triggers login if needed. Login is required to the destination service (Bahamut), not to the extension itself.

Permission risk

Medium-risk permissions

This estimate uses declared permissions and host permissions to assess access scope and sensitivity.

扩展能力较强：storage

Publisher

Brownsugar

Independent publisher

Email: [email protected]
Phone: --
Address: --

Public contact fields are shown above. Developer portfolio pages are available on paid accounts.

View developer portfolio

Permissions

Host access