Is OneScholar safe?

OneScholar writes saved settings, including API keys, into page-accessible storage and form fields during backup/export.

OneScholar's content script runs on HTTP and HTTPS pages. When a user backs up or exports settings, it base64-encodes the full settings object and writes it to the page's localStorage or a page DOM input, where page scripts can read values such as PubMed, OpenAlex, Semantic Scholar, and Zotero settings.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.