Is ParrotTalks抄筆記 safe?

ParrotTalks bundles hardcoded Google API credentials in its extension package, exposing vendor-owned keys to any user.

The extension ships two Google API keys in cleartext within its bundled JavaScript: one for the Google Scribe dictionary API and one for the URL Shortener API. Any user who installs the extension can extract these keys from the package and use them to make requests on ParrotTalks' behalf. The keys are not user-supplied credentials — they belong to the extension developer and authenticate the extension's backend service calls.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.