Is GPT Formula safe?
GPT Formula exposes an OAuth callback that accepts URL-fragment tokens from any web page and stores them locally.
The extension makes its callback page and scripts available to all websites. That callback reads access_token and refresh_token values from the URL fragment and saves them as authToken and refreshToken in extension localStorage without checking the origin, state, or nonce.
Part of this rating comes from analysis signals we haven't published as detailed findings yet.
Who publishes itSchneider Holdings LLC - 2 other listings from the same operator, none carrying a finding
Schneider Holdings LLC - 2 other listings from the same operator, none carrying a finding
What this publisher told the store about itself, and the other listings that told it the same thing.
Same store account
2 other listings published from this account, 3k+ users between them, none of them carrying a finding.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
What it can do
Permissions this extension asks for, as declared in version 5.0.1. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.
Read and change your data on gptformula-backend-63108973fea5.herokuapp.com
https://gptformula-backend-63108973fea5.herokuapp.com/*
Read and change your data on stripe.com
https://*.stripe.com/*
Read and change your data on supabase.co
https://*.supabase.co/*
Read and change your data on billing.stripe.com
https://billing.stripe.com/*
Store data in your browser
storage
Write to your clipboard
clipboardWrite