Is Autotype - Free Text Expander safe?

Low risk

Autotype - Free Text Expander accepts webpage messages that insert supplied HTML into the focused editable field.

The extension injects a content script into all HTTP and HTTPS frames and tracks focused inputs, textareas, and contenteditable elements. Any page frame can send a CS_INSERT_RESULT postMessage, and the script inserts that message's HTML into the focused field without checking the sender's origin.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

Bonfire Labsv1.0.8Chrome Web Store
15Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 1.0.8. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read whatever you have copied to your clipboard

    clipboardRead

  • Add items to the right-click menu

    contextMenus

  • Store data in your browser

    storage

  • Store an unlimited amount of data in your browser

    unlimitedStorage

Updated 30 September 2026mgcgenippnenmppgfkbhcenpamhbbcna