Is OpenClaw Browser Relay - Powered by PaioClaw safe?

Medium risk

OpenClaw Browser Relay - Powered by PaioClaw is medium risk. During the Paio relay login flow, the extension sends your login email and stored Paio account identifiers to Mixpanel at https://api.mixpanel.com/track, including account data such as Paio user, server, and email values.

The Cyber Juryv2.26.1.5Chrome Web Store
45Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Findings

Login email and Paio account IDs sent to Mixpanel analytics

During the Paio relay login flow, the extension sends your login email and stored Paio account identifiers to Mixpanel at https://api.mixpanel.com/track, including account data such as Paio user, server, and email values.

Severity
Medium unwanted
Type
Unexpected
CWE
CWE-359
Source
Dynamic sandbox
What actually happens
You did this

The user takes a login-related action in the Paio relay extension.

The extension did this

The extension sends the login email and stored Paio account identifiers to Mixpanel analytics.

Captured request
POSThttps://api.mixpanel.com/track
Fields in the request
  • Stored Paio account data
    user_id=paio-user-123; server_id=server-456; user_email=user@example.com (illustrative)

    Includes account-related values from extension storage, such as Paio user, server, and email, that can tie analytics events to an account.

Updated 30 September 2026pfhemcnpfilapbppdkfemikblgnnikdp