Is AI Diagram Generator safe?

Medium risk

AI Diagram Generator includes a hardcoded OpenRouter API key for diagram generation requests.

When a user generates a diagram, the extension's tab UI uses its bundled OpenRouter provider to call the OpenRouter chat completions API. The shipped code includes a literal bearer token, and that token is sent to openrouter.ai/api/v1/chat/completions with the generation request.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

Aleksandr Lifanovv2.4.5Chrome Web Store
40Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 2.4.5. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on openrouter.ai

    https://openrouter.ai/*

  • Write to your clipboard

    clipboardWrite

Where it sends data

Destinations our analysis observed AI Diagram Generator contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • openrouter.ai

    AI Diagram Generator sends data to openrouter.ai. 7 other extensions we have analysed send data here.

Updated 30 September 2026ngopmehdeepldffjaccolpdkcmiggijb