Is FindSCI safe?

Medium risk

FindSCI retrieves a translator bearer token over HTTP before translating selected article text.

When a user clicks FindSCI's translate controls on PubMed or Google Scholar pages, the extension sends the selected title or abstract text for translation. Its default translation path first fetches a bearer token from edge.yclesson.com over unencrypted HTTP, then posts the text to Microsoft's Translator API using that token.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

yctech168v1.3Chrome Web Store
42Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 1.3. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on every secure site you visit

    https://*/*

  • Read and change your data on every site you visit

    http://*/*

  • Store data in your browser

    storage

Where it sends data

Destinations our analysis observed FindSCI contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • api-edge.cognitive.microsofttranslator.com

    FindSCI sends data to api-edge.cognitive.microsofttranslator.com. 21 other extensions we have analysed send data here.

Updated 30 September 2026kbcknkijhfdjheggbdnhlbgeinfaldbf