Is Mira for Chrome safe?

Medium risk

Mira for Chrome captures cookies, auth headers, and localStorage from pages opened with its skill-cookie URL marker.

When a page URL contains the mira_skill_cookie parameter and a valid Mira origin, the extension reads that page's cookies, selected request headers, and localStorage values. It forwards the captured data into a Mira chat session so the session can use the target site's authentication data.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

40Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Where it sends data

Destinations our analysis observed Mira for Chrome contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • mira.bytedance.com

    Mira for Chrome sends data to mira.bytedance.com. No other extension we have analysed sends data here.

  • mira.byteintl.net

    Mira for Chrome sends data to mira.byteintl.net. No other extension we have analysed sends data here.

Updated 30 September 2026bhegpnjcnbmflfpllknknngbpndjmogn