Is AI Assistant safe?

Medium risk

AI Assistant sends selected text, GPT-prefixed form text, and page URLs to its AWS GPT backend.

AI Assistant posts text you select, prompts typed into page form fields with a GPT: prefix, and page URLs from its popup or page actions to an AWS API for GPT responses. The extension then displays the remote response in an in-page modal, where the returned text is inserted as HTML rather than plain text.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

Castusoftv1.0Chrome Web Store
40Risk
Who publishes it

Castusoft - no other listings under this identity

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
Castusoft
Declared legal entity
Castusoft
Registered address
2904 Chaise Ln, Maineville, OH 45039-9038, US

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 1.0. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Add items to the right-click menu

    contextMenus

  • Act on the current tab, but only after you click the extension

    activeTab

  • Store data in your browser

    storage

Where it sends data

Destinations our analysis observed AI Assistant contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • r7xapwzch1.execute-api.us-east-1.amazonaws.com

    AI Assistant sends data to r7xapwzch1.execute-api.us-east-1.amazonaws.com. No other extension we have analysed sends data here.

Updated 30 September 2026manahiemhgolofngagbjjefiibejhcgm