Is Pushbullet safe?

Pushbullet is a legitimate cross-device notification and messaging extension with three postMessage handlers in the bundled forge.min.js cryptography library that lack origin validation, creating potential for cross-site scripting attacks if malicious sites can interact with extension pages.