Is Microsoft Dragon Copilot Web Extension safe?

Low risk

Microsoft Dragon Copilot Web Extension exposes native hub data to every matched website.

The extension injects a page-context bridge on nearly all websites and uses it to request data from the Dragon Copilot native messaging host. Page scripts on matched sites can listen for or request the same bridge response, which includes native hub data such as a stable userSecurityIdHash used as a session identifier.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

Microsoft Corporationv1.5.4Chrome Web Store
15Risk
Who publishes it

Microsoft Corporation - 3 other listings from the same operator, none carrying a finding

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
Microsoft Corporation
Declared legal entity
Microsoft Corporation
Registered address
One Microsoft Way, Redmond, WA 98052-8300, US
Registered contact
Microsoft Corporation

Same operator - 3 listings

Published under a different store account, but sharing the registered address, contact or declared legal entity this one gave the store.

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Updated 30 September 2026bojpifbeghjhkcjhdbdodlgolhmcdibm