Is Script Injector safe?
Script Injector lets any website request saved script-injection entries from extension storage.
Its content script runs on all sites and accepts page postMessage requests that include the public extension ID instead of checking the sender origin. A page can ask for a saved script by ID and receive the stored script name, type, content, and timestamps through a window.postMessage response.
Part of this rating comes from analysis signals we haven't published as detailed findings yet.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
What it can do
Permissions this extension asks for, as declared in version 1.0.0. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.
Read and change your data on every site you visit
<all_urls>
See the address and title of every tab you have open
tabs
Store data in your browser
storage