Podepisovací komponenta Signer

The extension has 30,000 users, indicating some level of adoption, but several concerning trust indicators emerge. The extremely low rating of 1.0 from only 1 review is a major red flag. The lack of visible author and developer information raises transparency concerns. The name suggests it's a signing component for Czech/Slovak organizations (Asseco), which could indicate legitimate business use, but this cannot be verified without proper developer identification.

The extension's Content Security Policy allows 'unsafe-eval', creating a significant security vulnerability that permits dynamic JavaScript execution. This could enable malicious code execution if exploited. The nativeMessaging permission allows communication with native applications on the user's computer, which combined with the unsafe-eval policy creates a dangerous combination. The content scripts run on multiple domains including intranet and business-related sites, potentially accessing sensitive corporate data. The absence of developer information makes it impossible to verify the extension's legitimacy or contact the developer for security concerns.

Given the high-risk security findings and poor trust indicators, avoid installing this extension on your primary browser profile. If the extension is required for business purposes, run it in a completely separate Chrome profile with restricted access to personal data. Contact your IT department to verify if this is an approved corporate tool. Consider alternative signing solutions that don't require such broad permissions or unsafe JavaScript evaluation. Monitor the extension closely for any suspicious behavior if installation is absolutely necessary.