extenshi.io
SECURITY REPORT · EXTENSHI SCAN

Citavi Picker

Firefox extension·by Citavi by Lumivero
16
/ 100 SAFETY SCORE
CRITICAL
Severe indicators. Treat as unsafe until the developer addresses these findings.

Likely abandonedsafety score reduced by 30 points

  • No update in over 5 years
Why this matters

An unmaintained extension keeps whatever flaws it shipped with, and a listing with users but no owner is an attractive target to buy and repurpose.

Automated analysis of publicly available code — not a professional security audit. It may produce false positives and does not prove an extension is unsafe or safe. Treat it as one signal among many. Disclaimer · Report an issue

How it ranks

Citavi Picker's safety score vs every other extension we've scanned
Globally
1%of extensions carry more risk
This extension
Riskier ←→ Safer
Ranked against 409,539 extensions
In Search Tools
0%of search tools extensions carry more risk
This extension
Riskier ←→ Safer
Ranked against 16,645 search tools extensions
Findings
158
median 4Lower is safer
Critical findings
4
median 0Severity = Critical
Permissions
10
median 3Declared in manifest
Active users
64018
median 2vs category median

Findings breakdown

Automated security signal · 158 distinct issues across 6 severities
158
distinct issues
detected
Scanners reported 161 raw occurrences; repeats of the same issue at the same location are merged here. The list below shows every occurrence.

Permissions requested

5 risky permissions of 10 total
2 critical permissions require attention
This extension requests 10 permissions in total. 5 of them grant broad capabilities that are worth a careful look.
Critical
Communicate with desktop apps

Can exchange messages with applications installed on your computer

Critical
Access to all websites(optional)

Can read and modify content on every website you visit

High
View open tabs

Can see URLs and titles of all open tabs

High
Access all HTTP sites

Can read and modify content on all non-encrypted websites

High
Access all HTTPS sites

Can read and modify content on all encrypted websites

Medium
Access current tab

Can temporarily access the content of the active tab when you click the extension

Medium
Store local data

Can save data locally in the browser for persistence

Medium
Access user identity

Can get OAuth2 tokens and access your Google account identity

Medium
Write to clipboard

Can place content onto your clipboard

Medium
Add context menu items

Can add custom items to the right-click context menu

Are you the author of Citavi Picker?

Claim this extension to respond to findings, add context, and earn a verified badge on extenshi.io.

Claim this extension

Add the badge to your README

Show Citavi Picker's live security score on GitHub or in your docs
Extenshi security score badge preview
Markdown
[![Extenshi security score](https://catalog.extenshi.io/api/badge/120107)](https://catalog.extenshi.io/extensions/120107/security)
HTML
<a href="https://catalog.extenshi.io/extensions/120107/security"><img src="https://catalog.extenshi.io/api/badge/120107" alt="Extenshi security score" /></a>

The badge always shows the current score — it updates automatically after every scan.

Scan performed by extenshi.io · Aug 1, 2026
Browser extensions made transparent.