Is マイナポータル safe?
マイナポータル injects hidden DOM elements exposing extension version and app status to page scripts on matched government portal sites.
The extension's content script creates hidden input elements on Japanese government portal pages that expose its version number and native app installation status to any script running in the same page context. It also listens for CustomEvents from the page and forwards their raw payloads to a native messaging host (jp.go.cao.mpa) without schema validation or field allowlisting.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
What it can do
Permissions this extension asks for, as declared in version 40.1.0.0. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.
Talk to a program installed on your computer, outside the browser's sandbox
nativeMessaging
Act on the current tab, but only after you click the extension
activeTab