Is Friends Remover - Mass Delete & Unfriend Tool | Inactive Friends safe?

Question

Accepted Answer

Friends Remover - Mass Delete & Unfriend Tool | Inactive Friends is critical risk. When the extension opens its Instagram helper page, it uses the Instagram content script to request Facebook's OAuth status endpoint with existing browser credentials. The returned Facebook access token is placed in an Instagram URL fragment, read by the background worker, and stored in extension local storage. When you use the extension's profile enrichment feature, it uses a stored Facebook access token to request friend profile details from graph.facebook.com. The request asks for fields such as birthday, email, gender, hometown, location, name, locale, link, language, and profile picture data.

Is Friends Remover - Mass Delete & Unfriend Tool | Inactive Friends safe?

Findings