Is NotebookLM Jetpack safe?

Low risk

NotebookLM Jetpack lets any HTTPS site ask the extension to reload itself through an external message.

Its manifest accepts messages from any HTTPS page, and the background script honors a DEV_RELOAD message without checking the sender before calling chrome.runtime.reload(). This behavior reloads the extension; the reviewed claim does not show data being sent to an outside party.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

15Risk
Who publishes it

No other listings under this identity, 2 shared hostnames

What this publisher told the store about itself, and the other listings that told it the same thing.

Shared hosts - 2 hostnames

Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.

svc-drcn.developer.huawei.com
Also called by 2 other listings, including COSE - 多平台文章同步
developer.huawei.com
Also called by 3 other listings, including COSE - 多平台文章同步

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.