Is Gaya safe?

Requests capabilities that reach outside the browsercapability score 100/100

Most notable: chrome debugger, access data on all websites, intercept network requests.

Installs

4.82

Rating

Reviews

this month

Last update

What it can access (18 permissions)

Read from the extension’s own manifest. These describe what it is technically able to do — not what it does do.

Chrome debuggercritical
Attach to the browser's debugging protocol, which can read and modify anything on any page, including passwords as you type them.
Access data on all websitescritical
Read and change the content of every site you visit, including banking and email.
Intercept network requestshigh
Observe every request the browser makes, including URLs.
Read and write cookieshigh
Read session cookies, which in some cases are enough to access an account without the password.
Inject scriptsmedium
Run its own code inside pages you visit.
Tab informationmedium
See the URL and title of every tab you have open.
Account identitymedium
Obtain OAuth tokens tied to your signed-in account.
Manage downloadsmedium
Start downloads and read your download history.
Local storagelow
Store its own settings and data locally.
Current tab on clicklow
Access the current tab only when you explicitly click the extension.
webNavigationlow
No documented elevated capability.
commandslow
No documented elevated capability.
offscreenlow
No documented elevated capability.
Unlimited local storagelow
Store data locally without the normal quota.
tabCapturelow
No documented elevated capability.
desktopCapturelow
No documented elevated capability.
sidePanellow
No documented elevated capability.
Access file:low
Read and change content on file: only.

Alternatives

Is this your extension?

Track your rating, install count and competitors over time, and get alerted when a rival ships an update or your ranking moves.

Claim this extension

Data read from the Chrome Web Store listing on 2026-09-16. Install counts are the store’s own rounded buckets. Permission descriptions are derived from the extension’s published manifest. This page describes capabilities, and is not an accusation of misuse.