Is Cassidy safe?
Cassidy can send webpage text and selected screenshots to app.cassidyai.com when page messages trigger its bridge.
Cassidy runs a content script on all websites and listens for page messages without checking the message origin. A matching message can make it convert the current page DOM to markdown, send up to 30,000 characters to the Cassidy iframe, or start a screenshot flow that captures the visible tab after a region is selected.
Part of this rating comes from analysis signals we haven't published as detailed findings yet.
Who publishes itCassidy - no other listings under this identity
Cassidy - no other listings under this identity
What this publisher told the store about itself, and the other listings that told it the same thing.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Where it sends data
Destinations our analysis observed Cassidy contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- app.cassidyai.com
Cassidy sends data to app.cassidyai.com. No other extension we have analysed sends data here.