Eliminates the need for students and teachers to manually enter credentials each time they log into school applications by automating the entire login flow via Wonde/MyLogin SSO tokens

1) Student/teacher navigates to a school application URL that contains a MyLogin/Wonde SSO token. 2) The content script detects the token via CookieManager.ssoDetected(). 3) The extension fetches the user's credentials from the MyLogin/Wonde API using the token. 4) It fills in the login form fields and submits the form automatically. 5) If a captcha is detected, it pauses and prompts the user. 6) On success, it cleans up cookies and logs completion. Alternatively, clicking the extension icon opens app.mylogin.com to initiate the SSO flow.

Target users: K-12 students / Teachers / School administrators using Wonde/MyLogin managed educational technology

Cannot verify what happens on the MyLogin/Wonde platform (app.mylogin.com) - the SSO authentication flow and whether it has paid tiers is not visible from extension code
Cannot determine if schools/individuals need to pay for the MyLogin/Wonde service
The extension targets all HTTPS pages (content script match pattern 'https://*/*') but only activates when SSO tokens are present, so the wide permissions are necessary for its workflow

Monetization

No paid features detected

No evidence of paid features, subscriptions, payment gates, or billing APIs anywhere in the extension source code. Grepping for premium, subscription, upgrade, payment, price, billing, and plan returned zero matches. The 'pro' keyword hits in the static analysis are false positives from words like 'process', 'production', and 'prod' (as in the URL path /prod/pass). The 'license' hit is from jQuery's MIT license header. No feature gating or upgrade prompts exist.

Confidence: 95
Payment platform: --
Source: AI / High
Login required: Yes
Reason: The extension's core workflow requires an SSO token from the MyLogin/Wonde platform. The service_worker.js opens https://app.mylogin.com when the extension icon is clicked (service_worker.js:2). The content script detects login tokens via URL parameters (wonde-login/mylogin-login) or cookies, then fetches credentials from the MyLogin/Wonde API (lib/V2.js:152-159, lib/V1.js:42-44). Without being authenticated on the MyLogin/Wonde platform first, the extension has no token to work with and cannot perform any login automation.

Permission risk

Low-risk permissions

This estimate uses declared permissions and host permissions to assess access scope and sensitivity.

未命中敏感权限或广域站点访问规则

Publisher

Philip Clifton

Email: [email protected]
Phone: +447834572248
Address: Furlong house Willie Snaith Road Newmarket CB8 7SG GB

Public contact fields are shown above. Developer portfolio pages are available on paid accounts.

View developer portfolio

Permissions

Host access