Is Topaz SigPlusExtLite Extension safe?

Topaz SigPlusExtLite exposes a biometric signature-pad bridge to every website with no origin restriction.

The extension injects content scripts into all pages and listens for CustomEvents that any page can dispatch. When triggered, it relays commands to the Topaz native host (com.topaz.sigplusextlite.win.2), which drives a physical signature pad and returns the captured signature image, raw pen data, and signature string back to the requesting page. A separate command path allows any page to trigger a JPEG screen capture of a secondary GemView display window, with the result returned to the page via the same CustomEvent channel.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.