Is Citadel browser agent safe?
Checked version: 1.3.2 · Scan date (UTC): 2026-10-20
Automated analysis of publicly available code — not a professional security audit. It may produce false positives and does not prove an extension is unsafe or safe. Treat it as one signal among many. Disclaimer · Report an issue
How it ranks
Findings breakdown
detected
Permissions requested
Communicate with desktop apps
Can exchange messages with applications installed on your computer
Access to all websites
Can read and modify content on every website you visit
Observe web requests
Can monitor all network requests made by the browser
Manage downloads
Can initiate downloads and access your download history
Access browser cookies
Can read and modify cookies, potentially accessing login sessions
Execute scripts in pages
Can inject and execute JavaScript code in web pages
Monitor navigation
Can observe and track tab navigation events and URL changes
Store local data
Can save data locally in the browser for persistence
Access user identity
Can get OAuth2 tokens and access your Google account identity
View email address
Can see the email address of the signed-in Chrome user
Schedule tasks
Can schedule periodic background tasks
Are you the author of Citadel browser agent?
Claim this extension to respond to findings, add context, and earn a verified badge on extenshi.io.
Add the badge to your README
What this assessment covers
- Store listing
- Firefox
- Checked version
- 1.3.2
- Current listed version
- 1.3.2
- Scan date (UTC)
- Assessment status
- Completed
Recorded findings: 3 critical and 7 high severity. Read the finding details before interpreting the score; automated flags are not proof of malicious behaviour.
Automated analysis looks for suspicious code, permissions and other risk signals. It does not observe every runtime behaviour or independently audit the publisher’s servers. A low-risk result is not a guarantee of safety. How our checks work.