Is Lazuli safe?

Low risk

Lazuli inserts remote teacher-score feed values into ZJU course-selection pages as HTML without escaping.

On ZJU course-selection pages, Lazuli fetches teacher-score data from its configured online source and caches it for display. The extension only checks that expected fields exist, then builds HTML links from the remote teacher id and rating values and inserts them into the page.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

ADSR1042v1.1.4Chrome Web Store
15Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 1.1.4. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Show you desktop notifications

    notifications

  • Store data in your browser

    storage

Updated 30 September 2026gpiacjfgnabenbpincmnbinfmbihloed