Is Save Story for Instagram safe?

Save Story for Instagram downloads files from any URL that a web page posts to it, with no origin check.

The extension downloads Instagram and Facebook stories. A content script runs on every site and frame, and forwards any window message it receives to the background worker, which passes it to the browser's download function as a URL. Any web page can therefore trigger a silent download from a host of its choosing, though it cannot read the downloaded file back.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.