plasmo
Pass
Audited by Gen Agent Trust Hub on Jul 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The project setup instructions use the official Plasmo CLI command (
pnpm create plasmo), which is the standard, verified method for scaffolding new extension projects. - [SAFE]: All code examples utilize the framework's official packages (
@plasmohq/storage,@plasmohq/messaging) for managing state and communication, which are legitimate developer tools. - [SAFE]: The background sync example uses a generic placeholder domain (
api.example.com), which is a documentation best practice for demonstrating network operations without referencing real external infrastructure. - [SAFE]: The UI examples for the options page include placeholders for user-provided configuration (such as an API key input), which is an educational demonstration of settings management rather than an exposure of sensitive credentials.
Audit Metadata