Is Dark Mode for Google Docs safe?

Question

Accepted Answer

Dark Mode for Google Docs is critical risk. When the extension popup opens, the packaged HTML identifies the page as LinkLeadSpy and describes it as a tool to find LinkedIn email IDs. That metadata is bundled in the same popup file declared by the Dark mode for Google Docs manifest, so the installed extension presents a product identity and purpose that do not match its public Google Docs dark-mode listing. The extension is listed as a Google Docs dark-mode tool, but its manifest grants access to every URL and loads its content script on every site. During dynamic analysis, the script ran on google.com, amazon.com, and facebook.com: each page logged a blocked request for the extension stylesheet, showing the content script executed outside docs.google.com. That access can expose page URLs and page content on sites unrelated to Google Docs.

Is Dark mode for Google™ Docs safe?

Findings