Is Salesforce Interactions SDK Launcher safe?

Clean risk

Salesforce Interactions SDK Launcher injects Salesforce/Evergage SDK scripts into active sites for its editor features.

The extension runs on all sites at page start and, when its Visual Editor, Sitemap Editor, beacon injection, template testing, or launcher flow is active, appends a Salesforce/Evergage SDK script tag to the page. The script URL is built from the configured account and dataset and points to Salesforce's Evergage CDN.

Salesforcev5.0.1Chrome Web Store
3Risk
Who publishes it

Salesforce - 3 other listings from the same operator, none carrying a finding

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
Salesforce
Declared legal entity
Salesforce
Registered address
415 Mission St 3rd Floor, San Francisco, CA 94105-2504, US
Registered contact
Salesforce

Same store account

3 other listings published from this account, 708k+ users between them, none of them carrying a finding.

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 5.0.1. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on every site you visit

    <all_urls> and 1 more

  • Read and change your data on every secure site you visit

    https://*/*

  • See the address and title of every tab you have open

    tabs

  • Watch every request your browser makes

    webRequest

  • Change your browser's privacy and security settings

    privacy

  • Store data in your browser

    storage

  • Run its own code inside the pages you visit

    scripting

  • Block and redirect the requests your browser makes

    declarativeNetRequest

  • See which of your requests its blocking rules matched

    declarativeNetRequestFeedback

declarativeNetRequestWithHostAccess

Where it sends data

Destinations our analysis observed Salesforce Interactions SDK Launcher contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • cdn.evgnet.com

    Salesforce Interactions SDK Launcher sends data to cdn.evgnet.com. No other extension we have analysed sends data here.

Updated 30 September 2026mhmpepeohaddbhkhecaldflljggicedf