Is Windy safe?

Low risk

Windy lets inspected pages trigger privileged stylesheet fetches and inject the fetched CSS into the page.

When DevTools is open, Windy injects a message bridge into the inspected tab. Page scripts can send a getStylesheet request through that bridge, causing the extension to fetch a supplied stylesheet URL with its all-URLs permission and inject the response as a style element in the page DOM.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

Beyond Codev1.3.6Chrome Web Store
17Risk
Who publishes it

Beyond Code GmbH - no other listings under this identity

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
Beyond Code
Declared legal entity
Beyond Code GmbH
Registered address
An d. Lingenmühle 10, Mönchengladbach 41061, DE
Registered contact
Marcel Pociot

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 1.3.6. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on every site you visit

    <all_urls>

  • Store data in your browser

    storage

  • Write to your clipboard

    clipboardWrite

  • Act on the current tab, but only after you click the extension

    activeTab

  • Run its own code inside the pages you visit

    scripting

Updated 2 November 2026fjidjgneljagnakdcijilikbmgoajeln