Is 文章同步助手 safe?

async function getCookiesForDomain(domain) {  const cookies = await chrome.cookies.getAll({ domain });  return cookies.map((cookie) => ({    name: cookie.name,    value: cookie.value,    domain: cookie.domain,    path: cookie.path,    secure: cookie.secure,    httpOnly: cookie.httpOnly,    expirationDate: cookie.expirationDate  }));}

async function getCookie(domain, name) {  const matches = await chrome.cookies.getAll({ domain, name });  return matches.length > 0 ? matches[0].value : null;}

async function checkXiaohongshuAuth() {  try {    await setupHeaderRules();    const response = await runtime.fetch(      "https://creator.xiaohongshu.com/api/galaxy/user/info",      {        credentials: "include",        headers: { Accept: "application/json, text/plain, */*" }      }    );    const body = await response.json();    await clearHeaderRules();    if (body.success && body.data) {      userId = body.data.userId;      return {        isAuthenticated: true,        userId,        username: body.data.userName,        avatar: body.data.userAvatar      };    }    return { isAuthenticated: false, error: "未登录小红书创作者平台" };  } catch (error) {    await clearHeaderRules();    return { isAuthenticated: false, error: error.message };  }}

async function getCsrfToken() {  if (csrfToken) return csrfToken;  try {    const token = await runtime.getCookie?.("https://x.com", "ct0");    if (token) {      csrfToken = token;      return csrfToken;    }  } catch (error) {    debug("Cookie API failed:", error);  }  if (runtime.tabs) {    try {      const tabId = await ensureXTab();      const result = await runtime.tabs.executeScript(        tabId,        async () => {          try {            const cookies = document.cookie.split(";");            for (const cookie of cookies) {              const [name, value] = cookie.trim().split("=");              if (name === "ct0" && value) return { success: true, token: value };            }            return { success: false, error: "ct0 cookie not found" };          } catch (error) {            return { success: false, error: error.message };          }        },        []      );      if (result?.success && result.token) {        csrfToken = result.token;        return csrfToken;      }    } catch (error) {      debug("executeScript error:", error);    }  }  throw new Error("请先登录 X (Twitter)");}

const VERSION_CHECK_URL = "https://wpics.oss-cn-shanghai.aliyuncs.com/wechatsync-version.json";async function fetchVersionInfo() {  try {    const res = await fetch(VERSION_CHECK_URL, { cache: "no-cache", headers: { Accept: "application/json" } });    // No signature check, no checksum, no pinned certificate: whatever this    // bucket returns is trusted as-is.    return res.ok ? await res.json() : null;  } catch {    return null;  }}async function checkForUpdates(force = false) {  const currentVersion = getCurrentVersion();  if (!force && !isCheckDue()) {    return cachedUpdateInfo();  }  const remote = await fetchVersionInfo();  if (!remote) return { hasUpdate: false, currentVersion };  const hasUpdate = compareVersions(remote.version, currentVersion) > 0;  const info = { hasUpdate, currentVersion, latestVersion: remote.version, info: hasUpdate ? remote : undefined };  await chrome.storage.local.set({ version_update_info: info });  return info;}