Is Flash Copilot - Powered by DeepSeek safe?

Medium risk

Flash Copilot is medium risk. When you create or sync an annotation, Flash Copilot can send the page URL, page title, keywords, and annotation content to kjeek.com. The stored evidence shows a POST to the annotation endpoint carrying that object.…

huafeihua123xxxv12.11.0Chrome Web Store
45Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Findings

SeverityMEDIUM
ClassUNWANTED
TypeUnexpected
CWECWE-200
SourceAI SANDBOX

Annotation content is uploaded to kjeek.com when users create annotations.

When you create or sync an annotation, Flash Copilot can send the page URL, page title, keywords, and annotation content to kjeek.com.

The stored evidence shows a POST to the annotation endpoint carrying that object.

01EvidenceCAUSE EFFECT
What actually happens
You did this

You create or sync an annotation in the extension.

The extension did this

The extension posts annotation content and page context to the kjeek.com annotation endpoint.

02EvidenceNETWORK CAPTURE
Captured request
POSTkjeek.com/xapi/annotation
03EvidenceFIELD TABLE
Fields in the annotation request
FieldValueWhy it matters
Page URL
https://example.com/article (illustrative)Shows which web page the annotation is tied to.
Page title
Example Article Title (illustrative)Adds readable page context for the annotation.
Annotation content
Highlighted passage with a user note (illustrative)Can include selected page text, notes, keywords, or images connected to the annotation.
SeverityMEDIUM
ClassUNWANTED
TypeUnexpected
CWECWE-200
SourceAI SANDBOX

Search feature reads up to one year of browsing history.

When you use Flash Copilot's Alt+Comma search, the extension reads up to 10,000 browser history entries from the past year.

That local pull includes visited URLs and page titles before results are narrowed and shown to you.

01EvidenceCAUSE EFFECT
What actually happens
You did this

The user opens the extension's search feature with the Alt+Comma shortcut.

The extension did this

The extension reads up to 10,000 browser history entries from the past year for local search.

02EvidenceFIELD TABLE
Fields read from browser history
FieldValueWhy it matters
Visited URL
https://example.com/article (illustrative)Shows the web pages you visited and can reveal browsing interests or account locations.
Page title
Example Article Title (illustrative)Adds readable context about the pages in your history.
Browsing history
Up to 10,000 entries from the past year (illustrative)Combines many visits into a timeline of recent web activity.
Updated 30 September 2026klokphhomfboclhpijjcgbpdjoccaagc