[danuker]

You can disable automatic updates for the extension, download it manually, and inspect the XPI file before installing it.

Instead of clicking "Add to Firefox", you can right-click and "Save Link As..."