Is Lasso - Annotate & Collaborate on Any Website with Screenshots🪄 safe?

Lasso lets any web page trigger its injected bridge to open a supplied HTTP(S) URL in a new active tab.

Lasso injects a content script on all pages that listens for a lasso:open-collection event and reads collection, comment, and URL values from a page-set DOM attribute. The background script accepts that relayed message and opens the supplied HTTP(S) URL in a new active tab while storing the pending collection and comment state.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.