Is Kami for Google Chrome™ safe?

Medium risk

Kami removes a cross-origin security header from Google Classroom pages to enable its document integration.

Kami is a PDF and document annotation tool for education that integrates with Google Classroom, Canvas, and Schoology. To support its Classroom attachment flow, it uses a declarativeNetRequest rule to strip the Cross-Origin-Opener-Policy response header from matching classroom.google.com URLs. This disables cross-origin isolation on those pages, which Chrome would otherwise enforce, allowing Kami to open cross-origin window references needed for its integration.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

Kamiv2.0.25202Chrome Web Store
45Risk
Who publishes it

Notable Limited - 1 other listing from the same operator, none carrying a finding

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
Kami
Declared legal entity
Notable Limited
Registered address
6405 Hillegass Avenue, Oakland, CA 94618, US
Registered contact
Jordan Thoms

Same store account

1 other listing published from this account, none of them carrying a finding.

Shared hosts - 3 hostnames

Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.

app.peardeck.com
Also called by 3 other listings, including Pear Deck Power-Up
asset-cdn.schoology.com
Also called by 3 other listings, including Schoology Plus
ircdname.azureedge.net
Also called by 3 other listings, including Immersive Reader - Improve Reading Accessibility, Helperbird

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Updated 30 September 2026ecnphlgnajanjnkcmbpancdjoidceilk