Is Bubble.io Toolkit - Framify.io safe?
Bubble.io Toolkit - Framify.io accepts commands from any web page to install plugins and make authenticated requests in your Bubble app.
The extension's content script listens for window 'message' events on Bubble/Webflow editor pages but never checks who sent them. Any page that gets a handle to that tab can post messages telling it to install an arbitrary Bubble plugin, send an authenticated same-origin request with an attacker-chosen URL and body using your session, or inject page/element data into your app design. No data is sent off-device by this behavior; the risk is that another site can drive privileged editor actions in your own Bubble account.
Part of this rating comes from analysis signals we haven't published as detailed findings yet.
Who publishes itframifyiotool - no other listings under this identity
framifyiotool - no other listings under this identity
What this publisher told the store about itself, and the other listings that told it the same thing.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
What it can do
Permissions this extension asks for, as declared in version 2.6.0. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.
Read and change your data on localhost
http://localhost/*
Read and change your data on framify.io
https://framify.io/*
Read and change cookies, including the ones that keep you signed in
cookies