Is Chromium browser automation safe?

Chromium browser automation records user interactions including password field values and replays them by executing caller-supplied scripts in page context.

The extension operates as a browser automation tool: it records clicks, form changes, and blur events across all HTTP/HTTPS pages, capturing password field values during recording sessions and storing them locally as part of playback state. During playback it injects caller-defined JavaScript into the MAIN world context of any covered page. The extension also sends a persistent anonymous UUID to Google Analytics each time the service worker starts.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.