Is cmdOS Automation safe?

Q: Is cmdOS Automation safe?

cmdOS Automation is medium risk. The rating reflects signals from our analysis that have not yet been published as detailed findings.

Q: Who makes cmdOS Automation?

cmdOS Automation is published by support, registered at 008, Silver Park Apartment, 5th Cross Rd, Reliable Residency Layout, Phase-3, Reliable Residency Layout Phase 3, 1st Sector, HSR Layout, Bengaluru, Karnataka 560102, IN. We hold no other store listing under the same registered identity.

Medium risk

cmdOS Automation accepts login tokens and file-download requests posted by any webpage, with no origin check.

A message bridge injected into every frame of every site listens for window.postMessage events and only checks that the sender is the page's own window, not which site sent it. Any page can post a CMDOS_LOGIN_SUCCESS message to have its token stored as the extension's logged-in access token, or post a TASKLABS_DOWNLOAD_IMAGE message to have a file (data URL and filename of the page's choosing) silently written to disk without a save-as prompt.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

supportv0.3.66Chrome Web Store

40Risk

Who publishes it

support - no other listings under this identity

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher

support

Registered address

008, Silver Park Apartment, 5th Cross Rd, Reliable Residency Layout, Phase-3, Reliable Residency Layout Phase 3, 1st Sector, HSR Layout, Bengaluru, Karnataka 560102, IN

Registered contact

Nalluri Bhanu Chandu

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.