Is Overleaf Copilot safe?
Overleaf Copilot sends IHEP chat prompts and a bundled bearer token to docsai.ihep.ac.cn over HTTP.
When its IHEP bot mode handles a chat request, Overleaf Copilot concatenates the chat messages into a query and posts them to an IHEP Docs AI endpoint using a bundled bearer token. The extension package also includes reusable IHEP and BigModel API credentials, with the BigModel key used for open.bigmodel.cn requests in BJTU or IHEP institute modes.
Part of this rating comes from analysis signals we haven't published as detailed findings yet.
Who publishes itOverleafCopilot - no other listings under this identity
OverleafCopilot - no other listings under this identity
What this publisher told the store about itself, and the other listings that told it the same thing.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
What it can do
Permissions this extension asks for, as declared in version 0.6.2.316. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to. The current listed version is 0.6.2.825, which we have not unpacked yet.
Read and change your data on promptgenius.site
https://*.promptgenius.site/*
Read and change your data on xcopilot.top
https://*.xcopilot.top/*
Read and change your data on overleafcopilot.com
https://*.overleafcopilot.com/*
Read and change your data on ihep.ac.cn
https://*.ihep.ac.cn/*
Sign you in with your Google account
identity
See the address and title of every tab you have open
tabs
Store data in your browser
storage
Where it sends data
Destinations our analysis observed Overleaf Copilot contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- open.bigmodel.cn
Overleaf Copilot sends data to open.bigmodel.cn. 5 other extensions we have analyzed send data here.
- docsai.ihep.ac.cn
Overleaf Copilot sends data to docsai.ihep.ac.cn. No other extension we have analyzed sends data here.