Is Photo Stock Assistant safe?

Question

Accepted Answer

Photo Stock Assistant is high risk. Photo Stock Assistant uses a public Supabase anon client to read a key from the api table and save it locally as OPENAI_KEY. That stored credential is then used as the bearer token for OpenAI chat completion requests, so the shared OpenAI API key can be exposed through the extension's Supabase endpoint.

Is Photo Stock Assistant safe?

Findings