Is RoboForm Password Manager safe?

RoboForm Password Manager intercepts WebAuthn passkey calls on all pages and can disable the browser's built-in password manager.

The extension injects a content script into every page that replaces the native navigator.credentials API, routing passkey creation and authentication requests through RoboForm's own handlers. Separately, when the user enables the setting to turn off browser password management, the extension calls browser privacy APIs to disable Firefox's built-in password-saving and autofill features. Both behaviors are controlled by user settings and are part of the extension's core password management functionality.