Is Ghostwrite: ChatGPT Email Assistant safe?
Ghostwrite: ChatGPT Email Assistant is critical risk. In Gmail or Outlook, this assistant downloads JS from app.ghostwrite.rip and eval()s it in the mail page on load, so future server responses get full access to your email and session, no update needed. A hidden field tells it the server.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Findings
Extension downloads and runs remote JavaScript inside Gmail and Outlook pages
In Gmail or Outlook, this assistant downloads JS from app.ghostwrite.rip and eval()s it in the mail page on load, so future server responses get full access to your email and session, no update needed.
A hidden field tells it the server.
You open a Gmail or Outlook message.
The extension downloads a script from app.ghostwrite.rip and runs it inside the mail page with eval().
The behavior can change any time the server changes its response, with no extension update.
The loader fetches the remote file and passes the response text straight to eval().
The content script writes a hidden gwURL input field, then injects the loader that reads it.
The remote script is served from the developer's own infrastructure and dynamic analysis only observed it being fetched and executed; the content returned at the time of analysis was not retained for inspection. The finding is the remote-code-execution capability itself - code outside the published, reviewed extension package runs inside logged-in Gmail and Outlook tabs and can be changed server-side at any time.