Is AnyGen Browser Operator safe?

Medium risk

AnyGen Browser Operator polls localhost for browser-control commands and accepts unsigned non-browser-scene actions.

The extension scans 127.0.0.1 ports 19816-19835, fetches commands from /actions/poll, and can navigate tabs or run debugger-backed JavaScript in the browser. It posts command results back to /actions/result on the same localhost service, including page state such as URLs, titles, tabs, page content, form input, or storage data when those are produced by a command.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

40Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Where it sends data

Destinations our analysis observed AnyGen Browser Operator contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • 127.0.0.1:19816-19835

    AnyGen Browser Operator sends data to 127.0.0.1:19816-19835. No other extension we have analyzed sends data here.

Updated 2 November 2026emkcncalbjlddkafaipjclhmmadeoidl