Is AI Chat & Writing Assistant by Wandpen safe?

Low risk

AI Chat & Writing Assistant by Wandpen forwards selected iframe text to embedding pages and lets them rewrite it.

When the extension runs inside an iframe, it watches selected text in textareas and editable page content, then posts that selection and a frame ID to the parent page. A parent page that receives the frame ID can send a message back to replace the selected text in the framed page without an origin or source check.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

Wandpenv0.7.9Chrome Web Store
17Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 0.7.5. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to. The current listed version is 0.7.9, which we have not unpacked yet.

  • Read and change your data on every site you visit

    <all_urls>

  • Store data in your browser

    storage

  • Add items to the right-click menu

    contextMenus

  • Schedule its own background tasks

    alarms

  • Run its own code inside the pages you visit

    scripting

Where it sends data

Destinations our analysis observed AI Chat & Writing Assistant by Wandpen contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • embedding page

    AI Chat & Writing Assistant by Wandpen sends data to embedding page. Named as a recipient by 2 other extensions we have analyzed.

Updated 2 November 2026macmkmchfoclhpbncclinhjflmdkaoom