Is OpenCLI safe?

Medium risk

OpenCLI connects to a localhost daemon that can read cookies, capture network data, run tab scripts, and take screenshots.

OpenCLI polls localhost:19825 and opens a WebSocket bridge to accept browser-control commands from the local daemon. Those commands can read cookies for requested domains or URLs, execute JavaScript in tabs through Chrome debugger APIs, capture screenshots, and record request and response headers and bodies from browser traffic.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

40Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Where it sends data

Destinations our analysis observed OpenCLI contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • localhost:19825

    OpenCLI sends data to localhost:19825. Named as a recipient in this extension's own analysis.

Updated 2 November 2026ildkmabpimmkaediidaifkhjpohdnifk