Is DotGit safe?

Clean risk

DotGit checks visited sites for exposed repository and sensitive-file paths and stores matching findings locally.

DotGit watches browser requests, derives the visited site's origin, and asks its content script to fetch paths such as /.git/HEAD by default. If optional checks are enabled, it can also test paths for SVN, Mercurial, .env, .DS_Store, and security.txt, then saves matching origins and finding types in local browser storage.

davturv5.2.1Firefox Add-ons
3Risk
Who publishes it

davtur - no other listings under this identity

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
davtur

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 5.2.1. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on every site you visit

    http://*/* and 2 more

  • Read and change your data on every secure site you visit

    https://*/*

  • Watch every request your browser makes

    webRequest

  • Store data in your browser

    storage

  • Show you desktop notifications

    notifications

  • Start, monitor and manage your downloads

    downloads

  • See the address and title of every tab you have open

    tabs

  • Run its own code inside the pages you visit

    scripting

Updated 30 September 2026amo-2599243