Is Zusty safe?
Zusty forwards React component metadata and page-posted Zustand state from matched pages to its DevTools panel.
Zusty's content script runs on matched pages, injects a page script, and relays page messages into the extension runtime. The injected script reads React component names under #root once per second, while the background forwards those messages plus page-posted action and state snapshots to the connected DevTools panel.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
What it can do
Permissions this extension asks for, as declared in version 6.0. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.
Read and change your data on every site you visit
<all_urls>
Act on the current tab, but only after you click the extension
activeTab
Run its own code inside the pages you visit
scripting