Is Media Converter and Muxer - Audio Tools safe?

Media Converter and Muxer downloads FFmpeg from GitHub without verifying file integrity before installing it to the user's home directory.

When a user converts or muxes media, the extension fetches a platform-specific FFmpeg binary and a native-client ZIP from the GitHub releases API and installs them via native messaging. No checksum or signature is checked at any point, meaning a compromised GitHub release or a network-level substitution could result in an untrusted binary being installed with world-executable permissions (chmod 0777). The extension itself does not transmit user data externally; all processing occurs locally through the native host.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.