ConText for LLMs – an extension for Firefox by FABRIC – reviewed by Claude
For: https://addons.mozilla.org/addon/context-for-llms/ version 1.0.2.
From: https://claude.ai/share/706d456b-4295-42cb-b650-aabe95715c6e (Sonnet 5.5, medium).
I'll start by reading the file-handling guidance, then unpack the extension and audit it.An .xpi is a zip archive. I'll list it first, and extract into my scratch directory since this is a code audit.The manifest declares only the storage permission and no host permissions. Next I'll search the first-party code for any network-capable APIs, then read the key files.I found some real issues. Before drawing conclusions I'll verify two more things: what the 28 fetch strings in KaTeX are, and whether the unescaped sinks can be reached with ordinary typed text.