Is DashBlox - Improving Roblox safe?

Medium risk

DashBlox fetches privacy-policy Markdown from GitHub and injects the converted HTML into its Roblox settings page.

On its settings page, DashBlox requests a privacy-policy Markdown file from a mutable GitHub branch, converts it to HTML, and appends it into the extension's Roblox settings interface. The claim is limited to DOM content loaded from that GitHub URL; no user browsing or account data transfer is evidenced in the available records.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

WingedDashv2.2Chrome Web Store
40Risk
Who publishes it

WingedDash - no other listings under this identity

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
WingedDash

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 2.2. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on roblox.com

    *://*.roblox.com/*

  • Store data in your browser

    storage

Where it sends data

Destinations our analysis observed DashBlox contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • raw.githubusercontent.comwidely used

    DashBlox sends data to raw.githubusercontent.com. A widely used service: 26 other extensions we have analysed send data here.

Updated 30 September 2026ogffnhpicoghhpcbememhijlbdejchjb