Is ChatGPT safe?
ChatGPT lets its Codex AI agent read browser history, bookmarks, and top sites, and control tabs via a debugger connection.
The extension exposes a set of automation 'tools' — including a Chrome DevTools Protocol debugger attach, browsing history search, bookmarks, top sites, recently closed sessions, and tab creation/navigation — that the ChatGPT/Codex AI agent can call. These are restricted to messages from the extension's own Codex side panel page and to a persistent native-messaging connection to a local Codex CLI app (com.openai.codexextension), not to arbitrary web pages. The one content script the extension injects is scoped to chatgpt.com and only relays user-triggered events into this flow.
Who publishes itOpenAI - 1 other listing from the same operator, none carrying a finding
OpenAI - 1 other listing from the same operator, none carrying a finding
What this publisher told the store about itself, and the other listings that told it the same thing.
Same store account
1 other listing published from this account, 4.0M+ users between them, none of them carrying a finding.
Shared hosts - 1 hostname
Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.