Is KeePassXC-Browser safe?

KeePassXC-Browser reads form credentials and passkeys on all websites and routes them to the local KeePassXC desktop app.

The extension injects content scripts on every page to detect login forms and capture submitted usernames and passwords, offering to save them to the user's local KeePassXC database. It also overrides the browser's WebAuthn/Passkeys API so passkey operations are handled by KeePassXC. All credential data is transmitted exclusively to the local KeePassXC application via native messaging or a localhost WebSocket; no data is sent to remote servers.