Is InboxApply - Auto Apply safe?
InboxApply autofills job applications and sends form data and a screenshot to developer Discord webhooks when errors occur.
InboxApply automatically fills in job applications on sites such as LinkedIn, Indeed and Dice. Its error reporter captures a screenshot of the active tab and the filled form HTML, and reports personal information and answers given, to hardcoded Discord webhook URLs run by the developer. The webhook addresses are embedded in the extension code.
Rated medium risk because of who publishes it: 1 of the 1 other listing from the same operator is rated high or critical for malicious behaviour. Flagged: RoboApply (high).
Who publishes itRoboApply LLC - 1 other listing from the same operator, 1 of them carrying a finding
RoboApply LLC - 1 other listing from the same operator, 1 of them carrying a finding
What this publisher told the store about itself, and the other listings that told it the same thing.
Same store account
1 other listing published from this account, 1k+ users between them. 1 of them carries a finding.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Where it sends data
Destinations our analysis observed InboxApply - Auto Apply contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- discord.com/api/webhooks
InboxApply - Auto Apply sends data to discord.com/api/webhooks. 2 other extensions we have analysed send data here.