Is obsidian-livesync-webclip safe?

Medium risk

obsidian-livesync-webclip sends clipped page content and saved CouchDB Basic credentials to a configured database URL.

When you click Clip, the extension captures the active page as MHTML, converts the page body to Markdown, and uploads the clip to the CouchDB endpoint you configured. If that endpoint uses plain HTTP, the request includes Basic authentication credentials plus the page URL, title, and content without transport encryption.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

42Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 0.6. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on every site you visit

    <all_urls>

  • Store data in your browser

    storage

  • Save the full contents of any page you visit

    pageCapture

Updated 30 September 2026jfpaflmpckblieefkegjncjoceapakdf