Is Agenda Hero for Chrome safe?

Medium risk

Agenda Hero for Chrome logs selected page content and screenshot prompts to Datadog before sending them to Agenda Hero.

When you use the extension's selection or screenshot features, it collects the selected HTML/text or cropped screenshot data from the page. The side panel logs that prompt data to Datadog and then sends it to Agenda Hero's magic-extension frame for processing.

Agenda Herov1.7.4Chrome Web Store
45Risk
Who publishes it

Agenda Hero Inc - no other listings under this identity

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
Agenda Hero
Declared legal entity
Agenda Hero Inc
Registered address
2261 Market St, San Francisco, CA 94114-1612, US
Registered contact
Agenda Hero
Website
agendahero.com/support

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Findings

Selected page content is logged to Datadog before Agenda Hero.

Using Agenda Hero's selection or screenshot feature can put page content or prompt data into a Datadog log event before forwarding.

Logged data can include DOM content and form input, sent to browser-intake-us3.datadoghq.com/api/v2/logs.

Severity
Medium unwanted
Type
Unexpected
CWE
CWE-359
Source
Dynamic sandbox
What actually happens
You did this

You use the extension's selection or screenshot feature.

The extension did this

The extension logs the resulting prompt data to Datadog before sending it to Agenda Hero.

Captured request
POSThttps://browser-intake-us3.datadoghq.com/api/v2/logs
Fields in the request
  • Selected page content
    <div>Meeting notes for Friday...</div> (illustrative)

    This can include HTML or text from the page you selected for Agenda Hero to process.

  • Form input on the page
    Project planning notes entered in a text field (illustrative)

    Selected content or screenshot prompt data can include text entered into page fields if that content is part of what you capture.

What it can do

Permissions this extension asks for, as declared in version 1.7.4. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on agendahero.com

    https://agendahero.com/*

  • Read and change your data on server.dev:4000

    https://server.dev:4000/*

  • Show a panel beside the page

    sidePanel

  • Add items to the right-click menu

    contextMenus

  • Run its own code inside the pages you visit

    scripting

  • Act on the current tab, but only after you click the extension

    activeTab

  • Store data in your browser

    storage

Where it sends data

Destinations our analysis observed Agenda Hero for Chrome contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • agendahero.com

    Agenda Hero for Chrome sends data to agendahero.com. No other extension we have analysed sends data here.

  • browser-intake-us3.datadoghq.com

    Agenda Hero for Chrome sends data to browser-intake-us3.datadoghq.com. No other extension we have analysed sends data here.

Updated 30 September 2026fglfichcambfnfmcjmppcnojneccedne