Is LinuxDo Scripts safe?
LinuxDo Scripts sends linux.do forum content to user-configured AI API endpoints and backs up settings to a user-configured WebDAV server.
When browsing linux.do, the extension scrapes forum topic titles, post bodies, and replies and forwards them to AI API endpoints (defaulting to api.openai.com and api.deepseek.com) via a background-page proxy. Users can configure a WebDAV server for settings backup; when this feature is used, all extension settings including the AI API key are uploaded as plaintext JSON to that server. The WebDAV password is stored in linux.do localStorage encoded only with base64, making it readable by any script running on the linux.do origin.
Part of this rating comes from analysis signals we haven't published as detailed findings yet.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
What it can do
Permissions this extension asks for, as declared in version 1.5.34. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to. The current listed version is 1.5.37, which we have not unpacked yet.
Read and change your data on every site you visit
http://*/*
Read and change your data on every secure site you visit
https://*/*
Store data in your browser
storage
Show a panel beside the page
sidePanel
See the address and title of every tab you have open
tabs
Where it sends data
Destinations our analysis observed LinuxDo Scripts contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- api.openai.comwidely used
LinuxDo Scripts sends data to api.openai.com. A widely used service: 76 other extensions we have analyzed send data here.
- api.deepseek.com
LinuxDo Scripts sends data to api.deepseek.com. 10 other extensions we have analyzed send data here.
- user-configured WebDAV server
LinuxDo Scripts sends data to user-configured WebDAV server. Named as a recipient by 2 other extensions we have analyzed.