Is sip safe?
sip lets any HTTPS page read its wallet settings through a hardcoded bridge namespace.
sip installs a content script on HTTPS pages that forwards page messages to the background service worker when they use the extension's hardcoded bridge scope. A page can call the settings method through that path and receive EVM, Substrate, Bitcoin, and Enkrypt wallet settings, even though the injected sip object is limited to specific sites.
Part of this rating comes from analysis signals we haven't published as detailed findings yet.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
What it can do
Permissions this extension asks for, as declared in version 0.10.12. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.
Store data in your browser
storage
Store an unlimited amount of data in your browser
unlimitedStorage
Add items to the right-click menu
contextMenus
Show a panel beside the page
sidePanel
See the address and title of every tab you have open
tabs