I haven't looked at the code and I feel a bit uncomfortable sharing my nsec with anyone, even an extension.

I would rather do the DM-confirmation, like with nostr.build .