Is Kawaak safe?

Medium risk

Kawaak ships a hardcoded Captain Data API key and project ID inside its extension bundle.

The bundled background and content scripts include production Captain Data credential values, making them visible to anyone who inspects the extension source. The confirmed claim identifies exposed credential material rather than transmission of user browsing data, so no data recipient is listed.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

Kawaakv1.0.57Chrome Web Store
40Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Updated 21 September 2026bhpjnepmecojnfbecoamagcmnpkahgag