Is Document signing component for NKČR safe?

Clean risk

Document signing component for NKCR lets allowed NKCR and localhost pages read selected cookies for local PKI signing.

Pages on *.nkcr.cz and localhost can connect to the extension and ask it to retrieve named cookies for specified URLs. When a cookie request is received, the extension reads those cookies, joins them into name=value pairs, and forwards the result to the local native PKI service used for document signing.

NKČRv2.1.0.1Chrome Web Store
2Risk
Who publishes it

STYRAX, a.s. - no other listings under this identity

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
NKČR
Declared legal entity
STYRAX, a.s.
Registered address
Hvězdova 1716/2B, Praha 4-Nusle 140 00, CZ
Registered contact
STYRAX, a.s.

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 2.1.0.1. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on nkcr.cz

    *://*.nkcr.cz/*

  • Read and change your data on localhost

    *://localhost/*

  • Talk to a program installed on your computer, outside the browser's sandbox

    nativeMessaging

  • Act on the current tab, but only after you click the extension

    activeTab

  • Store data in your browser

    storage

  • Read and change cookies, including the ones that keep you signed in

    cookies

Where it sends data

Destinations our analysis observed Document signing component for NKČR contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • cz.ica.icapkiservice.host

    Document signing component for NKČR sends data to cz.ica.icapkiservice.host. 4 other extensions we have analysed send data here.

Updated 30 September 2026pnofkpnfmljeoipnjheegodoeeihphfa