AI 产品解读Automatically syncs the user's Steam access token with participating third-party Steam trading sites, and auto-fills trade offers with items specified in URL parameters
Steam access tokens expire every 24 hours, requiring users to manually refresh and re-enter them on third-party trading sites. This extension automates token refresh and sync, eliminating the repetitive manual process. It also auto-populates trade offers so users don't have to manually search their inventory.
1. User logs into Steam normally in their browser (steamcommunity.com).
2. User visits a participating third-party trading site, which sends a JWT and configuration to the extension via the injected content script API.
3. Extension verifies the JWT signature and domain authorization, then stores the partner site configuration.
4. Extension reads the steamLoginSecure cookie to extract the Steam access token.
5. Extension uploads the access token to each registered partner site's token endpoint.
6. Extension monitors Steam session health and auto-refreshes via login.steampowered.com/jwt/refresh when needed.
7. When user opens a Steam trade offer URL with item parameters, the tradeoffer content script auto-fills the specified items into the trade.
Automatic background Steam session/token refresh (every 10 minutes and on cookie changes)Upload Steam access tokens to registered partner trading sites via secure JWT-verified endpointsAuto-fill Steam trade offers with items specified in URL query parameters (for_item, my_item)Status dashboard popup showing connection state between Steam and each partner siteDomain registration with JWT verification to ensure only authorized partner sites can receive tokens
- 目标用户
- Steam traders who use third-party trading/marketplace sites / Users of Steam item trading platforms that need API access tokens
- Partner site domains are not hardcoded - they are registered dynamically when the user visits a participating site and the site sends a verified JWT. This means we cannot enumerate which specific sites are supported.
- The privacy policy is hosted on Pastebin (not a standard policy hosting location) but was not reviewed for this analysis.
付费分析未识别到付费功能
No evidence of paid features, subscriptions, payment gates, or upgrade prompts anywhere in the source code. The extension has no pricing UI, no Stripe/payment platform integration, no feature gating based on payment status, and no mention of premium/subscription concepts. The keyword matches for 'pro' are all false positives from JavaScript keywords like 'Promise', 'property', 'process', etc. The extension appears to be completely free.
- 置信度
- 95
- 支付平台
- --
- 来源
- AI / 高
- 需要登录
- 是
- 登录理由
- The extension requires the user to be logged into Steam in their browser. It reads the 'steamLoginSecure' cookie from steamcommunity.com (background/steam.js:34) and extracts the Steam ID and access token from it. If the cookie is absent (user not logged in), the core sync functionality cannot operate (background/service-worker.js:23-24: 'Not logged into Steam, so we can't sync up an access token'). The extension also auto-refreshes the Steam session via login.steampowered.com/jwt/refresh when the token is about to expire (background/steam.js:59). There is no extension-specific account system; login is purely browser-profile-based via Steam cookies.