Is LeoMeasure - DataLayer Checker & GTM Injector safe?

LeoMeasure copies Shopify custom pixel iframe dataLayer events into the top-level page when preview mode is enabled.

If its Shopify GTM Preview setting is enabled, a page containing a /custom/web-pixel- iframe can trigger the extension's message bridge and copy that frame's existing and future dataLayer entries into the parent page. Those entries can include DOM or analytics event objects stored in the iframe's dataLayer; the code forwards them with window.postMessage and pushes them into the top page's dataLayer.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.