Is Pacifist Web Extension safe?

Low risk

Pacifist Web Extension lets any website send chosen archive URLs to its Pacifist native host.

Its listing page is web-accessible on all sites and reads the URL after the question mark as an archive URL. When opened, it forwards that URL in a nativeMessaging request to com.charlessoft.pacifist without origin validation.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

charlesjsv2.0.2Chrome Web Store
19Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 2.0.0. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to. The current listed version is 2.0.2, which we have not unpacked yet.

  • Read and change your data on every site you visit

    <all_urls>

  • Block and redirect the requests your browser makes

    declarativeNetRequest

  • Talk to a program installed on your computer, outside the browser's sandbox

    nativeMessaging

Where it sends data

Destinations our analysis observed Pacifist Web Extension contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • com.charlessoft.pacifist

    Pacifist Web Extension sends data to com.charlessoft.pacifist. No other extension we have analysed sends data here.

Updated 30 September 2026imfdjhbohopocgajlcadahkkjkmlminj