Is Anki Tool safe?
Anki Tool sends AI auto-fill flashcard details and existing field content to its Cloudflare Worker.
When you use AI auto-fill, it gathers the deck name, card model, field names, already filled fields, and empty fields from the popup or side panel. The extension posts that JSON to ankitool-ai.basslawand.workers.dev, and the bundled worker code places the filled field content into a prompt sent to Google's Gemma API. Separately, when the highlight popup appears after text selection, it imports a Roboto stylesheet from fonts.googleapis.com on the page.
Part of this rating comes from analysis signals we haven't published as detailed findings yet.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
What it can do
Permissions this extension asks for, as declared in version 1.10.0. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.
Read and change your data on localhost:8765
http://localhost:8765/*
Read and change your data on workers.dev
https://*.workers.dev/*
Store data in your browser
storage
Show you desktop notifications
notifications
Schedule its own background tasks
alarms
Show a panel beside the page
sidePanel
Where it sends data
Destinations our analysis observed Anki Tool contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- fonts.googleapis.comwidely used
Anki Tool sends data to fonts.googleapis.com. A widely used service: 123 other extensions we have analysed send data here.
- generativelanguage.googleapis.comwidely used
Anki Tool sends data to generativelanguage.googleapis.com. A widely used service: 31 other extensions we have analysed send data here.
- ankitool-ai.basslawand.workers.dev
Anki Tool sends data to ankitool-ai.basslawand.workers.dev. No other extension we have analysed sends data here.