What our analysis found

Cosmos Extension, used by 100,000 people, showed no malicious code in Extension Auditor's review. Its permissions mean it can read and change data on all websites and can inject scripts into pages. It comes from a trusted publisher and was last updated in October 2026.

The extension is a legitimate content-saving tool for cosmos.so. All network communication is directed at the publisher's own domain and Sentry for error reporting, both standard for this category. Permissions are justified by the core functionality (saving images, links, text). The provided source files show only standard libraries and no malicious behavior. The ML model likely flagged broad host permissions and scripting, which are typical for such extensions.