Is Ghostwrite: ChatGPT Email Assistant safe?

Critical risk

Ghostwrite fetches and executes remote JavaScript from app.ghostwrite.rip on Gmail and Outlook pages, and strips Content-Security-Policy headers from all browser responses.

willv0.0.0.18Chrome Web Store
100Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Findings

Updated 17 June 2026fbjnnjochaopepfjpngghafgnafebkjh