Is LiberSign safe?

Legitimate French digital signature extension using native messaging. Content script exposes native host to all web pages via a postMessage handler that does not validate event.origin (content.js line 45), allowing any script on any page to send arbitrary commands to the native signer process.