Is Holodex Plus safe?

Low risk

Holodex Plus lets embedded YouTube live-chat pages send chat text through its content script.

The extension's YouTube live-chat content script accepts postMessage commands from a parent page and can place supplied text into the live-chat input. A page that embeds YouTube live chat can use that channel to send a chat message as the signed-in browser user after the script initializes.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

Holodexv1.0.0Firefox Add-ons
17Risk
Who publishes it

Holodex - no other listings under this identity

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
Holodex

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 1.0.0. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on youtube.com

    *://*.youtube.com/*

  • Read and change your data on holodex.net

    *://*.holodex.net/*

  • See the address and title of every tab you have open

    tabs

  • Store data in your browser

    storage

  • Add items to the right-click menu

    contextMenus

  • Watch every request your browser makes

    webRequest

declarativeNetRequestWithHostAccess
Updated 30 September 2026amo-2722878