Not a malware verdict
The risk score is a transparent summary of static indicators such as requested permissions, host access, JavaScript patterns and referenced domains. A high score can come from legitimate broad functionality, and a low score does not guarantee that an extension is safe. Do not treat a score as a certification, reputation signal or official security assessment.
Static analysis limits
- Code is read, never executed, so runtime behavior is not observed.
- Referenced domains are not proof that the extension contacted them.
- Permissions describe capability, not actual use of that capability.
- Minified, generated or bundled code can hide intent or produce misleading indicators.
- Server-side code, store updates and future versions are outside the analyzed package.
- Limits on file size, entry count and scanned bytes mean some content may be skipped.
Evidence and confidence
Findings show the matched evidence, a confidence level and an explanation. A medium or low confidence finding may be a false positive, especially in third-party libraries. Always read the evidence rather than relying on a single label.
Store data
Store descriptions, ratings and developer claims are not verified by this tool. A store listing can change after a package is analyzed. The analyzed package may not be the version currently offered to every user or region.
Your responsibility
Installing an extension is your decision. Consider the developer, the permission request, the store listing and independent reviews alongside this report. If an extension handles sensitive accounts or data, prefer a manual review by a qualified professional.
No warranty
The service is provided without warranties of any kind. We are not liable for decisions made in reliance on a report, to the extent permitted by law.