Is Colorpick Eyedropper safe?

Low risk

Colorpick Eyedropper ships a hardcoded Google Safe Browsing API key in its bundle that any user can read.

The extension includes a cleartext Google Safe Browsing v4 API key in background.js, which it uses to check URLs against threat lists via safebrowsing.googleapis.com. The key is visible to anyone who inspects the extension source. No user data is collected or forwarded beyond the URL lookup requests made to Google's API.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

Sam Larisonv0.0.2.39Firefox Add-ons
20Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Data recipients

safebrowsing.googleapis.com
Updated 17 September 2026amo-439080