Is AI Site Cloner - Clone any Website in One Click, Powered by step1.dev safe?
AI Site Cloner exposes saved clone content and screenshots to any page whose host contains step1.dev.
The content script runs on all sites and mounts a page API on hosts whose hostname contains step1.dev instead of requiring an exact origin. Those pages can list saved clone records and read stored HTML content, screenshots, URLs, and page titles; the same bridge can also open a new tab to a caller-supplied URL during onboarding.
Part of this rating comes from analysis signals we haven't published as detailed findings yet.
Who publishes itsmile - no other listings under this identity
smile - no other listings under this identity
What this publisher told the store about itself, and the other listings that told it the same thing.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
What it can do
Permissions this extension asks for, as declared in version 0.2.6. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.
Read and change your data on every site you visit
<all_urls>
Store data in your browser
storage
Store an unlimited amount of data in your browser
unlimitedStorage
Show a panel beside the page
sidePanel
Run its own code inside the pages you visit
scripting
Act on the current tab, but only after you click the extension
activeTab
Where it sends data
Destinations our analysis observed AI Site Cloner - Clone any Website in One Click, Powered by step1.dev contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- step1.dev
AI Site Cloner - Clone any Website in One Click, Powered by step1.dev sends data to step1.dev. No other extension we have analyzed sends data here.
- hosts containing step1.dev
AI Site Cloner - Clone any Website in One Click, Powered by step1.dev sends data to hosts containing step1.dev. Named as a recipient in this extension's own analysis.