The extension has very limited trust indicators with only 1,000 users and just 3 ratings, despite a perfect 5.0 rating. The lack of developer information, company details, and recent update history raises significant concerns about accountability and ongoing support. The extension's purpose of converting Confluence content to Markdown is legitimate, but the implementation appears overly broad for this specific function.
The extension requests excessive permissions that far exceed what's necessary for Confluence-to-Markdown conversion. The tabs permission allows monitoring and manipulation of all browser tabs, while clipboardWrite enables modification of clipboard content across all applications. The downloads permission grants access to download history and file creation capabilities. Most concerning is the broad content script injection pattern (*://*/*) that allows the extension to execute code on every website you visit, not just Confluence pages. This creates opportunities for data theft, credential harvesting, and malicious content modification across your entire browsing session.
Do not install this extension in your primary browser profile. If you must use it, create a dedicated Chrome profile isolated from sensitive accounts and personal data. Consider alternative Confluence export methods or browser bookmarklets that don't require such extensive permissions. Monitor your clipboard and download activity closely if using this extension, and remove it immediately after completing your conversion tasks.
| https://clients2.google.com/service/update2/crx | https://react.dev/errors/ | |
| http://www.w3.org/2000/svg | http://www.w3.org/1998/Math/MathML | |
| http://www.w3.org/1999/xlink | http://www.w3.org/XML/1998/namespace |
{ "name": "Confluence to Markdown", "icons": { "16": "icons/16.png", "32": "icons/32.png", "48": "icons/48.png", "128": "icons/128.png" }, "action": { "default_popup": "popup.html", "default_title": "Confluence to Markdown" }, "version": "1.0.0", "background": { "service_worker": "background.js" }, "update_url": "https://clients2.google.com/service/update2/crx", "description": "Convert Confluence pages to Markdown", "permissions": [ "activeTab", "clipboardWrite", "downloads", "tabs" ], "content_scripts": [ { "js": [ "content-scripts/content.js" ], "matches": [ "*://*/*" ] } ], "manifest_version": 3 }
ⓘ CRXaminer has partnered with our friends at Secure Annex to provide additional findings unique to their platform.
Secure Annex also analyzes extensions from other browsers, IDEs, and can continuously monitor.
This extension may not yet be analyzed by Secure Annex.