Is Unseen Message safe to use?

Unseen Message has a risk level of MEDIUM with an overall risk score of 4.6/10. Our scan detected 15 security findings. This extension has some risks worth reviewing.

What permissions does Unseen Message request?

Unseen Message requests the following permissions: storage. It also requests host access to: https://www.facebook.com/*, https://www.messenger.com/*.

What is Unseen Message's risk score?

Unseen Message has an overall risk score of 4.6/10 (MEDIUM). Breakdown: Permissions 6.5/10, Code 6.3/10, Combinations 0.0/10, CSP 3.1/10.

ExtSafe

Unseen MessageSecurity Analysis

Chromev1.0.4MV3March 16, 2026 at 08:10 PM

Use with caution

This extension requests significant permissions. Review the findings below before installing.

4.6MEDIUM

4.6 MEDIUM

This extension shows some risk signals that are common in legitimate extensions but worth reviewing. Check the details below.

Based on 3 permissions including high-risk ones, 13 code findings.

Trust Signals(0.5/10)

Permissions

6.5/10

Code

6.3/10

Combinations

0.0/10

Manifest/CSP

3.1/10

Permissions(3 analyzed)

Code Findings(10 patterns, 13 total)

Content Security Policy

No CSP Defined(1 issue)

MEDIUM

N/ANo CSP defined

This extension does not define a Content Security Policy. A CSP helps prevent XSS and code injection attacks.

Manifest Analysis(1 finding)

MEDIUM

web_accessible_resourcesJS files exposed to web pages

JavaScript files are exposed as web-accessible resources. Matched websites can load and interact with extension scripts.

External Domains(10)

cct.googlefacebook.comgoogleads.g.doubleclick.netimg.buymeacoffee.comm.mestats.g.doubleclick.netwww.buymeacoffee.comwww.merchant-center-analytics.googwww.messenger.comwww.youtube.com