rhwp - HWP 문서 뷰어 & 에디터

The extension has a strong user base of 70,000 users and an excellent rating of 4.9 stars from 231 reviews, suggesting legitimate functionality for HWP document viewing and editing. However, the lack of visible developer information raises transparency concerns. The high rating indicates users find value in the extension's core functionality.

The extension's permission set is extremely broad and concerning for a document viewer. The combination of <all_urls> host permissions with content script injection creates a powerful surveillance capability across all websites. The downloads permission could facilitate data exfiltration, while clipboardWrite enables manipulation of copied content. Most alarming is the 'wasm-unsafe-eval' CSP directive, which allows execution of potentially obfuscated malicious code through WebAssembly. These permissions far exceed what's necessary for document viewing functionality and create multiple attack vectors.

Given the critical risk level, avoid installing this extension on your primary browser profile. If you must use it for HWP document functionality, create a dedicated Chrome profile with no sensitive browsing activity or stored credentials. Consider using alternative document viewers with more restrictive permissions, or use HWP documents in isolated environments like virtual machines. Monitor your system for unusual network activity if installed, and regularly review your download history and clipboard usage.