Is YouTube Video and Audio Downloader (WebEx) safe?

The extension downloads binaries from third-party GitHub repos without integrity verification and installs them via native messaging.

The extension downloads a native messaging host binary from the andy-portmen/native-client GitHub repository and an ffmpeg binary from the inbasic/ffmpeg GitHub repository. Neither download is verified with a hash or signature; the extension uses whatever URL the GitHub releases API returns. Once downloaded, the ffmpeg binary is placed in the user's home directory with execute permissions via a native messaging exec command.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.