Is Wapi IA - Asistente para Mensajes safe?

Low risk

Wapi IA - Asistente para Mensajes strips WhatsApp Web's Content-Security-Policy header on every icon click and tab switch.

This extension adds a browser-level rule that blanks out the Content-Security-Policy response header for web.whatsapp.com, removing a protection WhatsApp uses to restrict what scripts and styles can run on the page hosting your live chat session. The rule is applied every time you click the extension icon on a WhatsApp tab and every time you switch to a WhatsApp tab, and the code frames it as a workaround for a caching quirk rather than a security feature. The change is confined to web.whatsapp.com and does not send data anywhere.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

creativoslatv1.0Chrome Web Store
15Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 1.0. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on web.whatsapp.com

    http://web.whatsapp.com/* and 1 more

  • Run its own code inside the pages you visit

    scripting

  • Block and redirect the requests your browser makes

    declarativeNetRequest

  • Clear your browsing history, cache and cookies

    browsingData

  • Keep running in the background while your browser is open

    background

  • Act on the current tab, but only after you click the extension

    activeTab

Updated 30 September 2026neehjkmefngeibfagemeeeihmpmopmci