Is Friend Requests Sender - Send, Track, Cancel & Auto Add Friends safe?

// Tee(profileUrl): rewrite a normal profile URL to Facebook's
// "Contact and basic info" endpoint before it's fetched.
function Tee(profileUrl) {
  const url = new URL(profileUrl);
  if (url.searchParams.has("id")) {
    // profile.php?id=123 -> ...&sk=directory_contact_info
    url.searchParams.set("sk", "directory_contact_info");
  } else {
    // /username -> /username/directory_contact_info
    url.pathname = `${url.pathname.replace(/\/+$/, "")}/directory_contact_info`;
  }
  return url.toString();
}

// M(profileUrl): runs in the service worker. Installs a temporary
// declarativeNetRequest rule that rewrites this one request's headers
// to look like a real browser page load, fetches with the logged-in
// user's own Facebook cookies attached, then removes the rule.
async function M(profileUrl, timeoutMs = 15000) {
  const ruleId = Math.floor(Date.now() % 1e6) + Math.floor(1000 * Math.random());
  const rule = {
    id: ruleId,
    priority: 100,
    action: {
      type: "modifyHeaders",
      requestHeaders: [
        { header: "sec-fetch-mode", value: "navigate", operation: "set" },
        { header: "sec-fetch-dest", value: "document", operation: "set" },
        { header: "accept", value: "text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8", operation: "set" },
      ],
    },
    condition: {
      urlFilter: `||${new URL(profileUrl).host}/`,
      resourceTypes: ["xmlhttprequest"],
      tabIds: [chrome.tabs?.TAB_ID_NONE ?? -1],
    },
  };
  await chrome.declarativeNetRequest.updateSessionRules({ removeRuleIds: [ruleId], addRules: [rule] });
  try {
    const response = await fetch(profileUrl, { credentials: "include" });
    return await response.text();
  } finally {
    await chrome.declarativeNetRequest.updateSessionRules({ removeRuleIds: [ruleId] });
  }
}

// w(ids, status): runs once per profile ID pasted or uploaded into
// 'Import New'. Fetches that profile's harvested record and stores it.
async function importProfiles(ids, status) {
  ids = ids.filter(Boolean);
  if (ids.length === 0) return;
  await forEachWithDelay(ids, async (id) => {
    if (existingRows.find((row) => row.id === id)) return;
    const details = await Kee({ id, name: "", url: `https://www.facebook.com/profile.php?id=${id}` });
    const current = await profileStore.get();
    if (current.find((row) => row.id === id)) return;
    await profileStore.set([...current, { id, status, log: "", details, selected: false }]);
  });
  setStatus("Ready");
}

// Maps one saved profile row onto the spreadsheet columns produced
// by the extension's CSV/XLSX export button.
function toExportRow(row) {
  const d = row.details;
  return {
    ID: d?.id,
    Name: d?.name,
    Gender: d?.gender,
    Birthday: d?.birthday,
    Relationship: d?.relationship || "",
    Hometown: d?.hometown?.name || "",
    Location: d?.location?.name || "",
    Bio: d?.bio || "",
    Category: d?.category || "",
    Email: d?.email || "",
    "Phone Number": d?.mobile_phone || "",
    Websites: d?.websites?.join(", ") || "",
  };
}