Is CFCA CryptoKit.Kingdee Extension safe?

Low risk

CFCA CryptoKit lets any web page send requests through the extension to a local native messaging host.

A content script on all sites relays page events to the extension's background script, which opens a native messaging connection to a host name chosen by the page and forwards page-supplied function calls to it. The native reply is returned to the page. Reach is limited to native hosts that list this extension ID, such as the CFCA CryptoKit certificate and signing component.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

15Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Updated 15 October 2026kioolcmlfpfennenppbpmihgaebhjmpp