Is Umbra Dark Mode safe?

Low risk

Umbra Dark Mode copies cross-origin stylesheet text into page-readable style elements on every site.

Umbra Dark Mode runs content scripts on all sites and asks its background script to fetch stylesheet URLs that the page script cannot read directly. It inserts the returned CSS text into new style elements in the page DOM, where scripts on that page can read the copied stylesheet contents.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

Forest Rasmussenv1.0.3Chrome Web Store
17Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 1.0.3. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on every site you visit

    <all_urls>

  • Run its own code inside the pages you visit

    scripting

  • Add items to the right-click menu

    contextMenus

  • Store data in your browser

    storage

  • Schedule its own background tasks

    alarms

Updated 30 September 2026jjlelpahdhfgabeecnfppnmlllcmejkg