Is Workiva safe?

Workiva reads clipboard contents, including images as data URLs, and returns them to wdesk.com pages on request.

The extension listens for messages from Workiva web pages (*.wdesk.com) via Chrome's externally_connectable API. When a page sends a paste request, the extension reads the full system clipboard — including image files converted to data URLs — using an offscreen document with clipboardRead permission. The clipboard data is then returned directly to the requesting wdesk.com page.