Is Useful safe?

Useful's bundled Markdown editor loads highlight.js, KaTeX, and other libraries from cdnjs.cloudflare.com without integrity checks.

Useful is a developer-toolkit extension whose Markdown-editing tool lazily loads optional formatting libraries (highlight.js for syntax highlighting, KaTeX, Mermaid, Prettier, cropperjs) from cdnjs.cloudflare.com rather than the local copies bundled elsewhere in the app, and none of these injected script tags carry a subresource-integrity check. The extension's own content security policy restricts script sources to 'self', which would likely block these remote scripts from executing in practice rather than allowing them to run.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.