extenshi.io
SECURITY REPORT · EXTENSHI SCAN

Clockify Time Tracker

Firefox extension·by CAKE.com
76
/ 100 SAFETY SCORE
CAUTION
Mostly fine, but a few things worth reviewing before you install.

Automated analysis of publicly available code — not a professional security audit. It may produce false positives and does not prove an extension is unsafe or safe. Treat it as one signal among many. Disclaimer · Report an issue

How it ranks

Clockify Time Tracker's safety score vs every other extension we've scanned
Globally
76.39%of extensions carry more risk
This extension
Riskier ←→ Safer
Ranked across every extension we scan
In its category
66.39%of its category extensions carry more risk
This extension
Riskier ←→ Safer
Ranked within its category
Findings
22
median 38Lower is safer
Risky permissions
5
median 1Critical + high perms
Total permissions
16
median 4All declared perms
Critical findings
0
median 2Severity = Critical

Findings breakdown

Automated security signal · 22 distinct issues across 6 severities
22
distinct issues
detected
Scanners reported 29 raw occurrences; repeats of the same issue at the same location are merged here. The list below shows every occurrence.

Permissions requested

5 risky permissions of 16 total
5 high-risk permissions require attention
This extension requests 16 permissions in total. 5 of them grant broad capabilities that are worth a careful look.
High
View open tabs

Can see URLs and titles of all open tabs

High
Observe web requests

Can monitor all network requests made by the browser

High
Execute scripts in pages

Can inject and execute JavaScript code in web pages

High
Access all HTTPS sites

Can read and modify content on all encrypted websites

High
Access all HTTP sites

Can read and modify content on all non-encrypted websites

Medium
Add context menu items

Can add custom items to the right-click context menu

Medium
Store local data

Can save data locally in the browser for persistence

Medium
Access current tab

Can temporarily access the content of the active tab when you click the extension

Medium
Access user identity

Can get OAuth2 tokens and access your Google account identity

Medium
Show notifications

Can display desktop notifications outside the browser

Low
Detect idle state

Can detect when your machine is idle, active, or locked

Low
Schedule tasks

Can schedule periodic background tasks

Info
*://*.clockify.me/*

No additional information available.

Are you the author of Clockify Time Tracker?

Claim this extension to respond to findings, add context, and earn a verified badge on extenshi.io.

Claim this extension

Add the badge to your README

Show Clockify Time Tracker's live security score on GitHub or in your docs
Extenshi security score badge preview
Markdown
[![Extenshi security score](https://catalog.extenshi.io/api/badge/6980)](https://catalog.extenshi.io/extensions/6980/security)
HTML
<a href="https://catalog.extenshi.io/extensions/6980/security"><img src="https://catalog.extenshi.io/api/badge/6980" alt="Extenshi security score" /></a>

The badge always shows the current score — it updates automatically after every scan.

Scan performed by extenshi.io · Jul 25, 2026· partial run (some scanners failed)
Browser extensions made transparent.