Is Automation for Google Gemini™ - Auto for Google Gemini™ safe?

Low risk

Gemini Automation sends a bundled client secret when it fetches remote configuration from its config servers.

When the extension requests remote configuration, it includes a hardcoded X-Client-Secret header in the request. The request goes first to configs.kylenguyen.me and falls back to extension-config.onegreen.workers.dev if the primary host fails.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

Truong Nguyenv1.2.5.0Chrome Web Store
15Risk
Who publishes it

Truong Nguyen - 4 other listings from the same operator, 2 of them carrying a finding

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
Truong Nguyen
Registered address
Tu Hoàng, Nam Từ Liêm, Hà Nội 119000, VN
Registered contact
Truong Nguyen

Same store account

4 other listings published from this account, 276k+ users between them. 2 of them carry a finding.

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Where it sends data

Destinations our analysis observed Automation for Google Gemini™ - Auto for Google Gemini™ contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • configs.kylenguyen.me

    Automation for Google Gemini™ - Auto for Google Gemini™ sends data to configs.kylenguyen.me. One other extension we have analysed sends data here.

  • extension-config.onegreen.workers.dev

    Automation for Google Gemini™ - Auto for Google Gemini™ sends data to extension-config.onegreen.workers.dev. No other extension we have analysed sends data here.

Updated 30 September 2026jlhacppkbcmonaanlkbgipimelfbjgpb