Is Gopeed safe?

Gopeed captures HTTP request headers, including cookies and authorization tokens, from all page navigations and forwards them to the local Gopeed download backend.

The extension intercepts every HTTP request header from main-frame and sub-frame navigations across all URLs using chrome.webRequest.onBeforeSendHeaders. When a download is created, the stored headers — which may include Cookie and Authorization values — are attached to the task payload and sent via native messaging to com.gopeed.gopeed or via HTTP POST to a user-configured Gopeed server at /api/v1/tasks. This behavior is part of the extension's download coordination feature, intended to authenticate download requests with the user's active session credentials.