Is Domesitka Utility safe?
Domesitka Utility captures Domestika Authorization headers and can return them to save.courses.
It watches requests to api.domestika.org and stores any Authorization header it sees in local extension storage. Its external message handler accepts requests from https://save.courses/*, where a page can ask for the stored value through a generic storage read action.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
What it can do
Permissions this extension asks for, as declared in version 0.0.5. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.
Read and change your data on domestika.org
https://*.domestika.org/*
Read and change your data on udemy.com
https://*.udemy.com/*
Read and change your data on 21-draw.com
https://*.21-draw.com/*
Read and change your data on translate.googleapis.com
https://translate.googleapis.com/*
Watch every request your browser makes
webRequest
Store data in your browser
storage
Run its own code inside the pages you visit
scripting
Start, monitor and manage your downloads
downloads
Run hidden pages in the background
offscreen
Where it sends data
Destinations our analysis observed Domesitka Utility contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- save.courses
Domesitka Utility sends data to save.courses. No other extension we have analysed sends data here.