Is CFCA CryptoKit.changecloud Extension safe?

CFCA CryptoKit.changecloud Extension bridges its own web pages to a locally installed native application over Chrome's native messaging API.

It only accepts connection requests from pages on CFCA's own changecloud.com.cn and changecloud.cn domains, then relays those requests to a native program installed on the user's machine. The background script forwards the connecting page's chosen native host name and message payload straight through to connectNative() and the native port without checking them against a fixed host id or command list.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.