Is open-os LLM Browser Extension safe?

Clean risk

open-os LLM Browser Extension sends chat prompts and configured persona text to the selected Ollama endpoint.

When you use the extension's chat UI, it posts the selected model and message history to an Ollama-compatible /api/chat endpoint. The message content can include text you typed plus stored pre-prompt or identity/persona text, and the endpoint defaults to localhost:11434 unless you configure another Ollama host.

luishgv1.04Chrome Web Store
0Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 1.04. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on localhost:11434

    http://localhost:11434/*

  • Store data in your browser

    storage

  • Show a panel beside the page

    sidePanel

  • Add items to the right-click menu

    contextMenus

  • Block and redirect the requests your browser makes

    declarativeNetRequest

Where it sends data

Destinations our analysis observed open-os LLM Browser Extension contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • localhost:11434

    open-os LLM Browser Extension sends data to localhost:11434. Named as a recipient in this extension's own analysis.

Updated 30 September 2026kgeinnbgpilffgaipgihigcphcokellk