Is Beyond 20 Safe? — Extension Safety Profile

Beyond 20 requests permissions that are typical for a cross-site integration tool. The "activeTab" and "scripting" permissions let it inject code into the current page only when you activate the extension, while "tabs" and "storage" allow it to save settings and recognize tab states. Its host access is limited to specific tabletop gaming sites (Roll20, D&D Beyond, and Forge VTT), meaning it can read and modify content on those pages to link dice rolls and character sheets. This scope is expected for an extension that bridges these platforms.

For any extension in the tabletop gaming tools category, users should be aware that such tools often handle game data and may interact with account sessions. Always install from the official Chrome Web Store listing and verify the publisher to avoid cloned or malicious versions. The developer’s declared privacy practices state that data is not sold or used for unrelated purposes, which is a positive sign, though these are self-declarations.

The extension’s strongest safety dimension is Maintenance & Ownership, scoring 100%, which reflects a recent update and active upkeep. Its weakest is Publisher & Identity at 60%, likely because the publisher is an individual or small project without a well-known corporate identity. This is common for niche hobbyist extensions and does not indicate a problem, but it means less institutional recourse if something goes wrong.