LinkedIn Attachment Scanner by jortiz

Fake job offers and "please review this document" messages are a common way to deliver malware on LinkedIn. This extension checks attachments before they reach your Downloads folder.

What it does
• Shows a status line under each attachment in a conversation: No threats found, Review before opening, or Dangerous file.
• Scans the file when you click Download. Clean files save as usual; anything else opens a dialog explaining what was found.
• Watches every other download that comes from LinkedIn and stops dangerous ones.

What it looks for
• Office documents: macros, hidden macro projects, remote template injection, embedded objects
• PDFs: JavaScript, launch actions, embedded files, encryption that hides content
• Disguises: programs named as documents, double extensions, text-direction tricks
• Archives: executables inside, password protection, nested archives
• HTML and SVG: scripts, fake login forms, HTML smuggling

Privacy
All checks run locally in your browser. Nothing is sent to the developer. Two optional features send data elsewhere, are off by default, and need your permission:
• VirusTotal lookup: with your own API key, the file's SHA-256 fingerprint (never the file) is sent to VirusTotal.
• Open in Google Drive: with your own Google client ID, a file you choose is uploaded to your own Drive so you can view it online instead of opening it on your computer.

Limits
This is a rule-based scanner, not antivirus. A file with no red flags can still be malicious. It is not affiliated with or endorsed by LinkedIn.

Open source (MIT): https://github.com/ortizjeronimo/linkedin-attachment-scanner