Enables secure digital signature operations required for authenticating and completing financial transactions on the Agricultural Development Bank of China (ADBC) corporate online banking platform, where a local cryptographic signing component must be invoked from the browser

1. User navigates to ADBC corporate online banking website (adbc.com.cn). 2. The banking page sends a 'connect' message to the extension via chrome.runtime.sendMessage. 3. The extension establishes a native messaging port to the local CFCA CryptoKit native host. 4. When the banking site needs to sign a transaction, it sends signing requests through the extension to the native host. 5. The native host performs cryptographic signing and returns results through the extension back to the web page. 6. The signed transaction is submitted to the banking server.

Target users: ADBC (Agricultural Development Bank of China) corporate online banking users / Chinese enterprise banking customers who need digital signature capabilities

The extension is very small (3 source files, ~3KB JS) and is essentially a thin bridge, so the analysis is straightforward.
Cannot verify the native messaging host application or its licensing/payment model since it is external to the extension.
The 'session' keyword matches in eventPage.js are false positives - they refer to message-passing session objects, not user authentication sessions.

Monetization

No paid features detected

No evidence of paid features, payment UI, billing APIs, subscription logic, or upgrade prompts anywhere in the extension code. The extension is a free cryptographic signing bridge utility provided by CFCA for ADBC banking customers. There is no payment platform integration.

Confidence: 95
Payment platform: --
Source: AI / High
Login required: Yes
Reason: The extension is a bridge used during the login and transaction signing workflow of the ADBC (Agricultural Development Bank of China) corporate online banking website. The extension itself has no login UI, but it is a required component for authenticating and signing transactions on the destination banking service. The store description explicitly states it is needed when logging into the ADBC corporate online banking site to complete signed transactions.

Permission risk

High-risk permissions

This estimate uses declared permissions and host permissions to assess access scope and sensitivity.

敏感权限：nativeMessaging

Publisher

liangjiangjian

Independent publisher

Email: [email protected]
Phone: --
Address: --

Public contact fields are shown above. Developer portfolio pages are available on paid accounts.

View developer portfolio

Permissions

Host access