Is Export to Figma safe?

Export to Figma lets scripts on an activated page fetch cross-origin URLs through the extension and read the results.

After you click the extension on a page, it injects a bridge that accepts page messages and forwards requested URLs to the extension service worker. The service worker fetches those URLs with extension privileges, packages the returned data, and posts it back to the page; the same bridge can also start extension-managed downloads.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.