SECURITY REPORT · EXTENSHI SCAN
Substitoot — improved Mastodon federation
Chrome extension·by Kludge Guru
0
/ 100 SAFETY SCORE
CAUTION
Mostly fine, but a few things worth reviewing before you install.
Automated analysis of publicly available code — not a professional security audit. It may produce false positives and does not prove an extension is unsafe or safe. Treat it as one signal among many. Disclaimer · Report an issue
How it ranks
Substitoot — improved Mastodon federation's safety score vs every other extension we've scanned
Globally
51%of extensions carry more risk
Riskier ←→ Safer
Ranked against 369,936 extensions
In Lifestyle
52%of lifestyle extensions carry more risk
Riskier ←→ Safer
Ranked against 43,972 lifestyle extensions
Findings
15
median 12Lower is safer
Critical findings
0
median 0Severity = Critical
Permissions
2
median 1Declared in manifest
Active users
142
median 26vs category median
Findings breakdown
Automated security signal · 15 distinct issues across 6 severities
15
distinct issues
detected
detected
Critical00%
High17%
Needs Review00%
Medium533%
Low640%
Info320%
Permissions requested
1 risky permission of 2 total
1 high-risk permission require attention
This extension requests 2 permissions in total. 1 of them grant broad capabilities that are worth a careful look.
High
Execute scripts in pages
Can inject and execute JavaScript code in web pages
Medium
Store local data
Can save data locally in the browser for persistence
Are you the author of Substitoot — improved Mastodon federation?
Claim this extension to respond to findings, add context, and earn a verified badge on extenshi.io.
Add the badge to your README
Show Substitoot — improved Mastodon federation's live security score on GitHub or in your docs
Scan performed by extenshi.io · Aug 20, 2026
Browser extensions made transparent.