Is html.tomake.design (llama) safe?
html.tomake.design (llama) lets any website trigger a page DOM capture into a downloaded .h2fig file.
Its content script runs on all URLs and accepts page postMessage events that name an element selector, then asks the background script to capture that section and save it as a .h2fig download. The downloaded file contains the page URL and DOM content, and its built-in protection uses a date-derived XOR key that is included in the extension logic.
Part of this rating comes from analysis signals we haven't published as detailed findings yet.
Who publishes itchrome-webstore - no other listings under this identity
chrome-webstore - no other listings under this identity
What this publisher told the store about itself, and the other listings that told it the same thing.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
What it can do
Permissions this extension asks for, as declared in version 2025.1.3. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.
Read and change your data on every site you visit
<all_urls>
Act on the current tab, but only after you click the extension
activeTab
Run its own code inside the pages you visit
scripting
Start, monitor and manage your downloads
downloads
Store data in your browser
storage
Attach to pages with the browser's debugger, which can read and rewrite anything on them
debugger