Is POE Trade zh safe?

POE Trade zh fetches remote translation data from GitHub daily and writes it into page content on pathofexile.com without sanitization.

The extension retrieves JSON translation files from a GitHub repository every 24 hours and stores them locally. When rendering translations on Path of Exile trade pages, the content script writes fetched data directly into innerHTML without sanitization, meaning a compromised or modified GitHub-hosted file could inject arbitrary HTML into pathofexile.com pages. The extension does not send user data to external servers; its only external contact is fetching translation files from raw.githubusercontent.com.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.