Is Claude Tuner - Claude·ChatGPT·Gemini Tracker safe?

// check_shared_key.js// Confirms whether an unpacked copy of Claude Tuner still ships the hardcoded// fallback API key described in this report. Reads local files only; makes// no network requests.//// Usage: node check_shared_key.js /path/to/unpacked-extensionconst fs = require('fs');const path = require('path');const PREVIOUSLY_OBSERVED_KEY = 'claude-manager-dev-key-2024';function readFile(extDir, rel) {  const p = path.join(extDir, rel);  return fs.existsSync(p) ? fs.readFileSync(p, 'utf8') : null;}const extDir = process.argv[2];if (!extDir) {  console.error('Usage: node check_shared_key.js <unpacked-extension-dir>');  process.exit(1);}const constants = readFile(extDir, 'bg/constants.js');if (!constants) {  console.error('bg/constants.js not found under ' + extDir);  process.exit(1);}const match = constants.match(/DEFAULT_API_KEY\s*=\s*'([^']+)'/);if (!match) {  console.log('No DEFAULT_API_KEY literal found. This build may no longer ship a fallback key.');  process.exit(0);}const shippedKey = match[1];console.log('Shipped fallback key:', shippedKey);console.log('Matches the key in this report:', shippedKey === PREVIOUSLY_OBSERVED_KEY);console.log('Any install without a personal token sends this exact value as:');console.log('  - the X-API-Key header on /api/heartbeat and /api/users/preferences');console.log('  - the _auth body field on /api/snapshots');