Is CondividiStudioWeb safe?

Clean risk

CondividiStudioWeb reads DOM data on Italian government tax portals and forwards local download file paths to a native messaging host.

On pages at sister.agenziaentrate.gov.it and mypage.infocamere.it, the extension reads form action URLs or image attributes to construct download links. After triggering a file download via the Chrome Downloads API, it sends the resulting local file path to a native messaging host (com.sapes.chromemessagereciever) on the user's machine. The content script runs on all URLs, though the download-and-relay logic activates only on those two specific Italian government domains.

offerto da SAPES SPAv1.0.7Chrome Web Store
0Risk
Who publishes it

Zucchetti Software Giuridico - no other listings under this identity

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
offerto da SAPES SPA
Declared legal entity
Zucchetti Software Giuridico
Registered address
Via Enrico Fermi, Vicenza, VI 36100, IT
Registered contact
Graziano Castro

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 1.0.7. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Add items to the right-click menu

    contextMenus

  • Start, monitor and manage your downloads

    downloads

  • Talk to a program installed on your computer, outside the browser's sandbox

    nativeMessaging

  • Store data in your browser

    storage

Where it sends data

Destinations our analysis observed CondividiStudioWeb contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • com.sapes.chromemessagereciever (local native messaging host)

    CondividiStudioWeb sends data to com.sapes.chromemessagereciever (local native messaging host). Named as a recipient in this extension's own analysis.

Updated 30 September 2026nbmbjemkpfkojibljicdkikdoejpdjdn