Is HyRead圖書館註記匯出 safe?

Clean risk

HyRead圖書館註記匯出 embeds a HyRead API credential and uses it to read ebook annotations and reading progress.

When used on HyRead/NLPI ebook pages, its content script passes user and book identifiers to the background script, which queries HyRead DataService endpoints for annotation and reading-progress records. The shipped bundles include the HyDS application ID and REST API key used for those requests.

powentan0330v0.5.8Chrome Web Store
0Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 0.5.8. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on readwise.io

    https://readwise.io/api/v3/*

  • Read and change your data on ebook.hyread.com.tw

    https://*.ebook.hyread.com.tw/*

  • Read and change your data on nlpi.edu.tw

    https://*.nlpi.edu.tw/*

  • Store data in your browser

    storage

  • Start, monitor and manage your downloads

    downloads

  • See the address and title of every tab you have open

    tabs

Where it sends data

Destinations our analysis observed HyRead圖書館註記匯出 contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • service.ebook.hyread.com.tw

    HyRead圖書館註記匯出 sends data to service.ebook.hyread.com.tw. No other extension we have analysed sends data here.

Updated 30 September 2026jhneiikmjdmkjpcoggnbnofednphlamm