Am I Being Pwned? logoAm I Being Pwned?
Book a demo
HomeGPTZero: AI Detection & Writing Replay
Findings · 3
+8 more findings locked
MEDIUM FINDINGS · 3
  1. 01When a user clicks Report Issue in the Canvas LMS sidebar, the extension captures document.documentElement.outerHTML (up to 5MB) and includes it in a bug report POST to api.gptzero.me/v3/extension/report-bug. This DOM-snapshot behavior is new in v2026.5.2.
  2. 02The textarea-recorder content script now auto-starts keystroke recording on four new writing platforms (Notion, Medium, Substack, Microsoft Word Online) after a single one-time consent grant, uploading full edit histories to api.gptzero.me without any per-session user action.
  3. 03New textarea-recorder content script injects on all_urls and match_about_blank iframes, records typing steps and uploads to api.gptzero.me /v3/scan/{scanId}/writing-replay/chunks
+8 more findings locked
OTHER EXTENSIONS

Is GPTZero: AI Detection & Writing Replay safe?

Medium risk

No summary available.

chrome-extension-publisherv2026.3.1Chrome Web Store
45Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Findings

+8 more findings not shown

Book a call to see all findingsScan your browser
Updated 30 May 2026kgobeoibakoahbfnlficpmibdbkdchap

Am I Being Pwned?

Protecting organizations from malicious browser extensions.

© 2026 Bay Area Labs Inc. All rights reserved.

BlogHow it worksSecurityFor VendorsFAQAPI DocsPrivacy PolicyTerms of ServiceContact