Is Workiva safe?

Clean risk

Workiva reads clipboard contents, including images as data URLs, and returns them to wdesk.com pages on request.

The extension listens for messages from Workiva web pages (*.wdesk.com) via Chrome's externally_connectable API. When a page sends a paste request, the extension reads the full system clipboard — including image files converted to data URLs — using an offscreen document with clipboardRead permission. The clipboard data is then returned directly to the requesting wdesk.com page.

Workiva v1.1.18Chrome Web Store
0Risk
Who publishes it

Workiva - no other listings under this identity

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
Workiva
Declared legal entity
Workiva
Registered address
2900 University Blvd, Ames, IA 50010, US

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 1.1.18. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on wdesk.com

    *://*.wdesk.com/*

  • Run hidden pages in the background

    offscreen

  • Read whatever you have copied to your clipboard

    clipboardRead

  • Write to your clipboard

    clipboardWrite

Updated 30 September 2026gmppioheijlidaamfhpjkhijdnjdbkmm