1. A web page (from an allowed domain) calls the extension via chrome.runtime.sendMessage. 2. The extension's service worker (eventPage.js) receives the request. 3. The extension connects to a native host application installed on the user's machine using chrome.runtime.connectNative. 4. Requests and responses are passed between the web page and the native host, handling session callbacks and disconnections.

Target users: Web application developers using CFCA security services / Users of the China National Cotton Exchange (CNCE) and related platforms

The extension relies on a native host application not included in the source package, so the actual cryptographic operations are not visible in the code. The analysis is based on the extension's role as a bridge.

Monetization

No paid features detected

The extension is a free security development kit provided by CFCA. There are no references to subscriptions, payments, licenses, or premium features in the source code or manifest.

Confidence: 95
Payment platform: --
Source: AI / High
Login required: No
Reason: The extension is a local bridge for native messaging. It does not implement any login UI, nor does it require the user to authenticate with the extension or the destination service to use its core functionality (connecting to a native host).

Permission risk

High-risk permissions

This estimate uses declared permissions and host permissions to assess access scope and sensitivity.

敏感权限：nativeMessaging
站点访问范围较广（10 项）

Publisher

中国北京全国棉花交易市场

Independent publisher

Email: [email protected]
Phone: --
Address: --

Public contact fields are shown above. Developer portfolio pages are available on paid accounts.

View developer portfolio

Permissions

Host access