Is LiberRPA Chrome Extension safe?

Clean risk

LiberRPA connects to a local automation server and runs commands including reading and setting cookies on the active tab.

The extension opens a native messaging link to the LiberRPA host, then connects to a Socket.IO server on 127.0.0.1 using a token. Commands from that server can navigate tabs, read or set cookies for the active tab's site, and relay actions to the page. It has no page-facing message listener and no externally_connectable entry.

Grit Huv0.3.0Chrome Web Store
0Risk
Who publishes it

Grit Hu - no other listings under this identity

What this publisher told the store about itself, and the other listings that told it the same thing.

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Where it sends data

Destinations our analysis observed LiberRPA Chrome Extension contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • 127.0.0.1 (local LiberRPA server)

    LiberRPA Chrome Extension sends data to 127.0.0.1 (local LiberRPA server). Named as a recipient in this extension's own analysis.