Is Canvas Open safe?
Canvas Open hides tab-switch events from Canvas quizzes and can send quiz questions to AI providers using your own API key.
On all pages, the extension overrides page visibility and focus signals and removes page_blurred and page_focused entries from Canvas quiz event reports before they reach the server. An optional AI solver, active only when enabled and an API key is set, reads quiz question text and choices, can capture tab screenshots, and sends them to the chosen AI provider. It can also dispatch input events to the page through the debugger.
Who publishes itCloakGPT - no other listings under this identity
CloakGPT - no other listings under this identity
What this publisher told the store about itself, and the other listings that told it the same thing.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Where it sends data
Destinations our analysis observed Canvas Open contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- api.openai.comwidely used
Canvas Open sends data to api.openai.com. A widely used service: 70 other extensions we have analysed send data here.
- generativelanguage.googleapis.comwidely used
Canvas Open sends data to generativelanguage.googleapis.com. A widely used service: 35 other extensions we have analysed send data here.
- api.anthropic.com
Canvas Open sends data to api.anthropic.com. 16 other extensions we have analysed send data here.
- openrouter.ai
Canvas Open sends data to openrouter.ai. 11 other extensions we have analysed send data here.