Is CFCA CryptoKit.CFAE Extension safe?

Clean risk

CFCA CryptoKit.CFAE Extension lets allowlisted external sites invoke its native messaging bridge.

The extension accepts external messages only from matching cfae.cn and nafmii.org.cn pages, then opens a native messaging connection using caller-supplied host values. Those pages can also pass caller-supplied payloads through the extension to the native messaging port.

北京金融资产交易所v3.4.0.1Chrome Web Store
1Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 3.4.0.1. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on cfae.cn

    https://*.cfae.cn/* and 1 more

  • Read and change your data on nafmii.org.cn

    https://*.nafmii.org.cn/* and 1 more

  • Talk to a program installed on your computer, outside the browser's sandbox

    nativeMessaging

Updated 30 September 2026pakdbolgkiaihjjnagiapphppcfmggcg