Is Creator Insights - Social Media Distribution & Analytics tool safe?
Creator Insights is high risk. A context-menu entry and shortcut open a screenshot tool. After you select an area and confirm, the extension captures the tab, opens an AI chat tab, attaches the image via React internals, injects a prompt, and auto-sends, no confirmation.…
Who publishes itProshare - no other listings under this identity
Proshare - no other listings under this identity
What this publisher told the store about itself, and the other listings that told it the same thing.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Findings
Context-menu screenshot auto-submits to AI chatbot without second confirmation
A context-menu entry and shortcut open a screenshot tool.
After you select an area and confirm, the extension captures the tab, opens an AI chat tab, attaches the image via React internals, injects a prompt, and auto-sends, no confirmation.
- Severity
- High unwanted
- Type
- Unexpected
- CWE
- CWE-200
- Source
- Dynamic sandbox
Eight content scripts injected at document_start into every browser tab
Eight JavaScript files inject at the earliest load phase into every tab, including banking, healthcare, and internal corporate sites.
They add DOM overlays, scan page content, and attach to page events before the page's own scripts run.
- Severity
- High unwanted
- Type
- Unexpected
- CWE
- CWE-200
- Source
- Dynamic sandbox
Cross-platform social posting engine with bot-detection evasion on 15 platforms
The automation engine posts to 15 platforms via synthetic DOM events, keyboard input, and React internals, mimicking human timing with Gaussian-jittered delays, personality-scaled speeds, and jittered clicks to evade bot detection.
- Severity
- High unwanted
- Type
- Unexpected
- CWE
- CWE-506
- Source
- Dynamic sandbox
- x.com / twitter.com
Automated posting via synthetic DOM events
- instagram.com / facebook.com
Automated posting via Meta content scripts
- linkedin.com
Automated posting via synthetic keyboard events
- tiktok.com
Automated video/post submission
- youtube.com / studio.youtube.com
Automated video description and upload
- threads.net / threads.com
Automated posting
- bsky.app
Automated posting via Bluesky automation script
- reddit.com
- tumblr.com
Automated post submission
+4 more findings not shown