Is Extrovert safe?

Extrovert reads your LinkedIn session cookies (li_at and premium li_a) and sends them to its own vendor backend.

On command, Extrovert calls chrome.cookies.get to read the li_at session cookie and li_a premium token for www.linkedin.com, bundles them with your user agent and LinkedIn profile id, and POSTs them to prod-nginx-v2.goextrovert.com. The external-message allowlist that triggers this collection hardcodes http://localhost:3000 alongside the vendor's app origin, so web content served from localhost:3000 on your machine can also invoke the cookie-harvesting command.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.