Is Email Search and Outreach by Sprouts safe?

async function buildLinkedInCredentialBundle() {
  try {
    const COOKIE_NAMES = ["li_at", "bcookie", "lang", "liap", "li_theme_set", "li_theme", "timezone", "bscookie", "li_a"];
    const credentials = { userAgent: navigator.userAgent };

    const userCoordinates = await getIpGeolocation(); // GET http://ip-api.com/json/
    const allLinkedInCookies = await chrome.cookies.getAll({ url: "https://www.linkedin.com" });
    const { liHeaders: capturedHeaders = {} } = await chrome.storage.local.get("liHeaders");
    const langCookie = await chrome.cookies.get({ url: "https://www.linkedin.com", name: "lang" });
    const liapCookie = await chrome.cookies.get({ url: "https://www.linkedin.com", name: "liap" });
    const bcookieCookie = await chrome.cookies.get({ url: "https://www.linkedin.com", name: "bcookie" });
    const liACookie = await chrome.cookies.get({ url: "https://www.linkedin.com", name: "li_a" });

    const jsessionId = allLinkedInCookies.find(c => c.name === "JSESSIONID")?.value ?? null;
    const allCookies = [...allLinkedInCookies, langCookie, liapCookie, bcookieCookie, liACookie];

    if (!jsessionId) { setCookieInvalid(true); return null; }
    // Requires the 3 LinkedIn tracking headers captured by the webRequest tap first.
    if (Object.values(capturedHeaders).filter(Boolean).length !== 3) {
      setCookieInvalid(true);
      (await getCachedRefreshTarget()) || showReSignInNudge();
      return null;
    }

    // Sales Navigator gating on li_a: only forwarded once the account is
    // confirmed to have Sales Nav access (or a cached flag says so).
    const hasSalesNavAccess = await checkSalesNavAccess();
    let liAValue = "";
    if (hasSalesNavAccess) {
      const cachedFlag = getCachedSalesNavFlag();
      if (liACookie?.value || cachedFlag) liAValue = liACookie?.value ?? "";
      else { notifyLinkedAccountPending(); return null; }
    }

    for (const cookie of allCookies) {
      if (cookie && COOKIE_NAMES.includes(cookie.name)) credentials[cookie.name] = cookie.value;
    }

    const fullCredentialBundle = {
      ...credentials,
      ...capturedHeaders, // x-li-lang, x-li-track, x-restli-protocol-version, csrf-token
      ...(liAValue ? { li_a: liAValue } : {}),
      JSESSIONID: jsessionId,
      "csrf-token": jsessionId.replace(/"/g, "")
    };

    // Scrape the LinkedIn profile in the same authenticated session
    const profile = await (await fetch("https://www.linkedin.com/voyager/api/me", {
      headers: { "csrf-token": jsessionId.replace(/"/g, "") }
    })).json();

    const bundle = {
      liAt: JSON.stringify(credentials),
      linkedInAccountV2Credentials: JSON.stringify(fullCredentialBundle),
      userCoordinates,
      linkedInAccountV2Data: extractProfileFields(profile)
    };

    return {
      ...bundle,
      firstName: profile.miniProfile.firstName,
      lastName: profile.miniProfile.lastName,
      publicIdentifier: profile.miniProfile.publicIdentifier,
      profilePhotoUrls: buildProfilePhotoUrls(profile)
    };
  } catch {
    return null;
  }
}

async function sendLinkedInCredentialsToReplyIo(linkedInAccountId, bundle) {
  return replyIoV2Client.linkedInAccounts.updateLinkedInAccountCookie({
    linkedInAccountId,
    linkedInAccountData: {
      cookie: bundle.liAt,
      userCoordinates: bundle.userCoordinates,
      linkedInAccountV2Credentials: bundle.linkedInAccountV2Credentials,
      linkedInAccountV2Data: bundle.linkedInAccountV2Data
    }
  });
}

// SDK layer: POSTs to https://api.reply.io/api/v2/chrome-extension/linkedinaccounts/{id}/cookie
function updateLinkedInAccountCookie(client, { linkedInAccountId, linkedInAccountData }) {
  return client.post({
    url: `linkedinaccounts/${linkedInAccountId}/cookie`,
    json: linkedInAccountData
  });
}

function initReplyIoClients(request, extra) {
  replyIoV1Client = createClient("https://api.reply.io/api/v1/chrome-extension", request, extra);
  replyIoV2Client = createClient("https://api.reply.io/api/v2/chrome-extension", request, extra);
}