Is "File System Access" on Firefox Add-ons Safe to Install?

sycxyc · firefox · v0.9.4

This extension brings the File System Access API to Firefox that helps web apps such as https://vscode.dev read and write local files and folders. Main features: * Implemented showOpenFilePicker, showDirectoryPicker, showSaveFilePicker functions and related interfaces. * Set to enable specific File System Access features on matching web pages. * Provides File System Access API for other compatible WebExtensions. Notes: * The local file operations required by this extension cannot be performed in the browser, and a helper app needs to be installed to assist in the related work. * The optional Code Editor feature is provided by the Code Editor extension. Limitations: * By default, FileSystemHandle will lose its instance methods after cloning (e.g. using IndexedDB or postMessage ), and requires additional configuration of the FS_CONFIG.CLONE_ENABLED . Web developers can use __FILE_SYSTEM_TOOLS__.parseHandle(handle) to restore the instance methods. * Limited Worker context support and requires additional configuration of the FS_CONFIG.WORKER_ENABLED . * Read file size is limited by the FS_CONFIG.FILE_SIZE_LIMIT . Web developers can read large file streams and slices with handle.getFile({ _allowNonNative: true }) , and write large file in-place with handle.createWritable({ _inPlace: true, keepExistingData: true }) . * DataTransferItem.prototype.getAsFileSystemHandle is not implemented. This extension is open source and you can file bug reports or feature requests on the GitHub issue . References: * https://wicg.github.io/file-system-access/

Risk Assessment

Pending
0
out of 100
MINIMAL

0 security findings detected across all analyzers

Firefox extension requesting 4 permissions

No Threats Detected

This extension passed all security checks

About This Extension

This extension brings the File System Access API to Firefox that helps web apps such as https://vscode.dev read and write local files and folders. Main features: * Implemented showOpenFilePicker, showDirectoryPicker, showSaveFilePicker functions and related interfaces. * Set to enable specific File System Access features on matching web pages. * Provides File System Access API for other compatible WebExtensions. Notes: * <b>The local file operations required by this extension cannot be performed in the browser, and a <a href="https://prod.outgoing.prod.webservices.mozgcp.net/v1/8c0e93e7ff25738aeeb97c29cbedb7b094d52c7950959184f2abdcf15c741f32/https%3A//github.com/ichaoX/ext-file/releases" rel="nofollow">helper app</a> needs to be installed to assist in the related work.</b> * The optional Code Editor feature is provided by the <a href="https://addons.mozilla.org/firefox/addon/code-editor/" rel="nofollow">Code Editor</a> extension. Limitations: * By default, <code>FileSystemHandle</code> will lose its instance methods after cloning (e.g. using <code>IndexedDB</code> or <code>postMessage</code>), and requires additional configuration of the <code>FS_CONFIG.CLONE_ENABLED</code>. Web developers can use <code>__FILE_SYSTEM_TOOLS__.parseHandle(handle)</code> to restore the instance methods. * Limited Worker context support and requires additional configuration of the <code>FS_CONFIG.WORKER_ENABLED</code>. * Read file size is limited by the <code>FS_CONFIG.FILE_SIZE_LIMIT</code>. Web developers can read large file streams and slices with <code>handle.getFile({ _allowNonNative: true })</code>, and write large file in-place with <code>handle.createWritable({ _inPlace: true, keepExistingData: true })</code>. * <code>DataTransferItem.prototype.getAsFileSystemHandle</code> is not implemented. This extension is open source and you can file bug reports or feature requests on the <a href="https://prod.outgoing.prod.webservices.mozgcp.net/v1/e34336bdabb44d27d3a561579149cafa24e24cf09039fb792cc98787af6a4a52/https%3A//github.com/ichaoX/ext-file/issues" rel="nofollow">GitHub issue</a>. References: * <a href="https://prod.outgoing.prod.webservices.mozgcp.net/v1/7d8a382ffb9084931279c4b98be0561b9aaec8f257aba5a5ca4c7c0ec6a47f6b/https%3A//wicg.github.io/file-system-access/" rel="nofollow">https://wicg.github.io/file-system-access/</a>

No Findings

All security checks passed

Security Analysis Summary

Security Analysis Overview

File System Access is a Firefox Add-ons extension published by sycxyc. Version 0.9.4 has been analyzed by the Risky Plugins security platform, receiving a risk score of 0/100 (MINIMAL risk) based on 0 security findings.

Risk Assessment

This extension presents minimal security concerns. The automated analysis found very few or no issues, suggesting it is suitable for general use.

What Was Analyzed

The security assessment covers multiple analysis categories:

  • Malware Detection: YARA rule matching against 2,400+ malware signatures
  • Secret Detection: Scanning for exposed API keys, tokens, and credentials
  • Static Analysis: Code-level security analysis for common vulnerability patterns
  • Network Analysis: Detection of suspicious network communications and endpoints
  • Obfuscation Detection: Identification of code obfuscation techniques

Developer Information

File System Access is published by sycxyc on the Firefox Add-ons marketplace. The extension has approximately 99 users.

Recommendation

Based on the automated security analysis, this extension appears safe for general use. As with any extension, users should review the requested permissions before installation.

Frequently Asked Questions