Is Flowchart Maker safe?

Medium risk

Flowchart Maker requires first-run survey answers and an email address, then sends them to quiz.swimming.run.

On first run, Flowchart Maker loads survey questions from quiz.swimming.run and requires answers plus a non-empty email address before marking the quiz complete. The extension posts the answers, email address, and a source value of extension to the same quiz.swimming.run service.

pseko.warjovicav3.6.0Chrome Web Store
45Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Findings

First-run survey posts answers and email to quiz.swimming.run

When you first open Flowchart Maker, the extension shows a survey that must be completed before it marks setup as finished.

It sends the selected answers and the email address you enter to quiz.swimming.run.

Severity
Medium unwanted
Type
Unexpected
CWE
CWE-359
Source
Dynamic sandbox
What actually happens
You did this

The user completes the required first-run survey.

The extension did this

The extension posts the survey answers and entered email address to quiz.swimming.run.

Captured request
POSThttps://quiz.swimming.run/api/collections/flowchart_maker_quiz_answers/records
Fields in the request
  • Survey form input
    answer selections with user@example.com (illustrative)

    The answers and email address connect the first-run survey response to the user-provided contact field.

Where it sends data

Destinations our analysis observed Flowchart Maker contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • quiz.swimming.run

    Flowchart Maker sends data to quiz.swimming.run. No other extension we have analysed sends data here.

Updated 30 September 2026npiiinidjjddnffoiopbkncedkkhhbia