Is Codia AI Web2Figma: Import Web to Editable Figma safe?

Clean risk

Codia AI Web2Figma captures the active page's DOM, URL, styles, and images into a local .codia export.

When you use its popup capture, the extension injects a content script into the active tab and reads page structure, text, computed styles, the page URL, image data, and related page metadata. It packages that page snapshot as a data URL and downloads it locally as a .codia file for import into Figma. No external recipient endpoint is identified in the confirmed claim.

codiav0.0.1Chrome Web Store
3Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 0.0.1. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on every site you visit

    *://*/*

  • Act on the current tab, but only after you click the extension

    activeTab

  • See every page you navigate to, as you navigate to it

    webNavigation

  • Run its own code inside the pages you visit

    scripting

  • Attach to pages with the browser's debugger, which can read and rewrite anything on them

    debugger

  • Start, monitor and manage your downloads

    downloads

Updated 30 September 2026lgkpkfjpoibickpmjijghililnfhdiad