The extension lacks critical identifying information including name, description, author details, user count, and ratings, making it impossible to assess developer credibility or community trust. The absence of basic metadata raises immediate red flags about the extension's legitimacy and transparency.
The extension requests powerful webRequest permissions that allow intercepting and modifying all web traffic, which is excessive for most legitimate use cases. While host permissions are limited to specific Brazilian government tax sites (NFe and CTe portals) and fsist.com.br, the combination of webRequest access with scripting permissions creates significant security risks. The extension can potentially capture sensitive financial and tax data, modify government portal interactions, or inject malicious code. The lack of developer information and extension details makes it impossible to verify the legitimacy of accessing these sensitive government systems.
Do not install this extension due to insufficient transparency and high-risk permission combination. If you must use it for legitimate business purposes, run it in a completely isolated Chrome profile with no other extensions or saved passwords. Verify the extension's authenticity through official channels before installation. Consider alternative solutions that don't require such broad web request interception capabilities. Monitor network activity if installed to detect any unauthorized data transmission.
| https://www.nfe.fazenda.gov.br/ | https://www.cte.fazenda.gov.br/ | |
| https://www.fsist.com.br/ | https://www.fsist.com.br | |
| https://www.fsist.com.br/Default.aspx | http://www.w3.org/2000/svg | |
| http://www.w3.org/1999/xlink | https://www.fsist.com.br/PriPlugin/v4/imgs/monitor/app1.png | |
| https://www.fsist.com.br/api/xmltopdf/ | https://clients2.google.com/service/update2/crx |
{ "name": "Gerar DANFe/DACTe", "icons": { "16": "icon16.png", "48": "icon48.png", "128": "icon128.png" }, "action": { "default_icon": "icon48.png", "default_popup": "index.html" }, "version": "3.11.0", "background": { "service_worker": "background.js" }, "update_url": "https://clients2.google.com/service/update2/crx", "description": "Extensão para lhe ajudar a gerar um DANFe/DACTe utilizando o xml ou o portal nacional da fazenda.", "permissions": [ "webRequest", "scripting" ], "content_scripts": [ { "js": [ "script.js" ], "matches": [ "https://www.nfe.fazenda.gov.br/*", "https://www.cte.fazenda.gov.br/*", "https://*.fsist.com.br/*" ], "all_frames": true } ], "host_permissions": [ "https://www.fsist.com.br/*", "https://www.nfe.fazenda.gov.br/*", "https://www.cte.fazenda.gov.br/*" ], "manifest_version": 3 }
ⓘ CRXaminer has partnered with our friends at Secure Annex to provide additional findings unique to their platform.
Secure Annex also analyzes extensions from other browsers, IDEs, and can continuously monitor.
This extension may not yet be analyzed by Secure Annex.