Is Magic Actions for YouTube safe?

Question

Accepted Answer

Magic Actions for YouTube is medium risk. The extension's service worker constructs a browser fingerprint — including your browser name and version, timezone offset, preferred language, a menu-click counter, and user settings — and transmits it as a JSON POST to api64.com/upd7 on first install and roughly every five hours thereafter. A randomly generated unique ID, persisted in chrome.storage.local under an obfuscated key, is included in every request, allowing the server to track the same user across sessions. Our dynamic-analysis session did not capture the request because a time-bucket guard (field e.uf) prevented the call from firing; the code paths are present in the shipped service worker.

Is Magic Actions for YouTube™ safe?

Findings