Is Chrome Step ToolBox safe?

Clean risk

Chrome Step ToolBox displays local Anki note metadata and media inside UWorld question pages.

When a UWorld explanation is open, the extension queries local AnkiConnect for matching notes, note details, and media files. It inserts fields, tags, and base64 image overlays into the UWorld page DOM, making that Anki content available to scripts running on the page.

hairy.basilv3.25Chrome Web Store
0Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 3.25. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Store data in your browser

    storage

  • See the address and title of every tab you have open

    tabs

Where it sends data

Destinations our analysis observed Chrome Step ToolBox contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • 127.0.0.1:8765

    Chrome Step ToolBox sends data to 127.0.0.1:8765. 2 other extensions we have analysed send data here.

  • apps.uworld.com

    Chrome Step ToolBox sends data to apps.uworld.com. No other extension we have analysed sends data here.

Updated 30 September 2026kjgenhkjjjldgneijakjlhdfkmjmedbj