Is Agent for WeChat safe?
Agent for WeChat sends GPT reply events, including WeChat prompt and reply fields, to PostHog when analytics is configured.
When the background script generates an AI reply, the content script records a PostHog event containing normalized WeChat request fields such as chat and message IDs, sender and recipient fields, the message body, group/from-me flags, provider, and the generated reply. The telemetry is sent only after a PostHog token and API host are configured in the license, with app.posthog.com used as the default host.
Part of this rating comes from analysis signals we haven't published as detailed findings yet.
Who publishes itln2e - 1 other listing from the same operator, none carrying a finding
ln2e - 1 other listing from the same operator, none carrying a finding
What this publisher told the store about itself, and the other listings that told it the same thing.
Same store account
1 other listing published from this account, 1k+ users between them, none of them carrying a finding.
Shared hosts - 1 hostname
Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
What it can do
Permissions this extension asks for, as declared in version 6.0.0. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.
Read and change your data on openai.com
https://*.openai.com/
Read and change your data on google.com
https://*.google.com/*
Read and change your data on wx.qq.com
https://wx.qq.com/*
Read and change your data on wx2.qq.com
https://wx2.qq.com/*
Read and change your data on web.wechat.com
https://web.wechat.com/*
Read and change your data on filehelper.weixin.qq.com
https://filehelper.weixin.qq.com/*
Store data in your browser
storage
Store an unlimited amount of data in your browser
unlimitedStorage
Schedule its own background tasks
alarms
Block and redirect the requests your browser makes
declarativeNetRequest
Show a panel beside the page
sidePanel
See the address and title of every tab you have open
tabs
Sign you in with your Google account
identity
Where it sends data
Destinations our analysis observed Agent for WeChat contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- app.posthog.com
Agent for WeChat sends data to app.posthog.com. 6 other extensions we have analysed send data here.