Is AutoSBC safe?

Medium risk

AutoSBC sends FUT player inventory snapshots and market price data to its own servers, with upload behavior controlled by a remote config.

When a user clicks the diagnostic button, AutoSBC collects a detailed snapshot of the player inventory, SBC state, automation settings from localStorage, and the user's Discord display name, then transmits this to autosbc.app. Separately, when the remote config enables uploads and the user has market logging on (default), the extension intercepts FUT market search results and periodically posts player IDs, names, ratings, and market prices to autosbc.app. The upload frequency and activation threshold are determined server-side via a config file fetched at startup.

AutoSBCv26.2.8Firefox Add-ons
45Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Findings

SeverityMEDIUM
ClassUNWANTED
TypeUnexpected
CWECWE-200
SourceAI SANDBOX

Diagnostic upload sends AutoSBC inventory and settings to autosbc.app.

When you click AutoSBC's diagnostic button, the extension sends a diagnostic report to autosbc.app.

The report includes player inventory and SBC page state along with AutoSBC settings stored in browser localStorage.

01EvidenceCAUSE EFFECT
What actually happens
You did this

You click the diagnostic button in the AutoSBC SBC panel.

The extension did this

AutoSBC builds a diagnostic snapshot with player inventory, localStorage automation settings, and SBC state, then sends it to its diagnostic endpoint.

02EvidenceNETWORK CAPTURE
Captured request
POSThttps://www.autosbc.app/api/diagnostic
03EvidenceFIELD TABLE
Fields in the request
FieldValueWhy it matters
SBC page and inventory data
club inventory and current SBC squad data (illustrative)Shows the player's club, transfer, storage, unassigned, and locked item state plus current SBC set, challenge, squad, and requirements.
AutoSBC browser storage settings
autosbc:autoautosbc and autosbc:settings values (illustrative)Includes saved automation, market filter, loop, meter, onboarding, and settings values from localStorage.

Data recipients

www.autosbc.app
Updated 17 September 2026amo-2840821