Is Ghostwrite: ChatGPT Email Assistant safe?

Critical risk

Ghostwrite: ChatGPT Email Assistant is critical risk. In Gmail or Outlook, this assistant downloads JS from app.ghostwrite.rip and eval()s it in the mail page on load, so future server responses get full access to your email and session, no update needed. A hidden field tells it the server.

willv0.0.0.18Chrome Web Store
100Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Findings

SeverityCRITICAL
ClassUNWANTED
TypeUnexpected
CWECWE-829
SourceAI SANDBOX

Extension downloads and runs remote JavaScript inside Gmail and Outlook pages

In Gmail or Outlook, this assistant downloads JS from app.ghostwrite.rip and eval()s it in the mail page on load, so future server responses get full access to your email and session, no update needed.

A hidden field tells it the server.

01EvidenceCAUSE EFFECT
What actually happens
You did this

You open a Gmail or Outlook message.

The extension did this

The extension downloads a script from app.ghostwrite.rip and runs it inside the mail page with eval().

The behavior can change any time the server changes its response, with no extension update.

02EvidenceNETWORK CAPTURE
Captured request
GEThttps://app.ghostwrite.rip/extension.bundle.js
03EvidenceCODE COMPARE
The code that does this

The loader fetches the remote file and passes the response text straight to eval().

What it actually does
04EvidenceCODE COMPARE
The code that does this

The content script writes a hidden gwURL input field, then injects the loader that reads it.

What it actually does
05EvidencePLAIN NOTE
Observation

The remote script is served from the developer's own infrastructure and dynamic analysis only observed it being fetched and executed; the content returned at the time of analysis was not retained for inspection. The finding is the remote-code-execution capability itself - code outside the published, reviewed extension package runs inside logged-in Gmail and Outlook tabs and can be changed server-side at any time.

Updated 17 September 2026fbjnnjochaopepfjpngghafgnafebkjh