Is Sendblue Call safe?

Sendblue Call lets any webpage open attacker-chosen tabs through its injected event bridge.

The extension injects a bridge script on all websites and listens for a sendblue-notify-extension event from the page. When a page sends an open-url event, the background script opens the supplied URL in a new tab without checking the page origin. The confirmed claim did not identify direct reading of cookies, page content, or credentials.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.