Is Goodkey safe?

Question

Is Goodkey safe?

Accepted Answer

Goodkey is medium risk. When you use Goodkey's GPT feature, the extension sends the chat request to lk2.in-fo.ru's GPT proxy. The shipped background script includes a static bearer token for that proxy, exposing the credential in the extension package instead of keeping it server-side. When Goodkey is active and you use its page indexing or highlighting feature, the extension reads the visible text from the current webpage and sends normalized text to mcc.r-broker.ru for lemmatization. Because the content script is declared for all webpages, the request can include body text from the active site, such as article text, search results, or other visible page content.

Is Goodkey safe?

Findings