Is Pocket Prompt safe?

Question

Accepted Answer

Pocket Prompt is medium risk. When you open Pocket Prompt from the extension, it builds a Pocket Prompt web URL that includes the stored access token in the query string. That puts a credential alongside the page URL sent to pocket-prompt.com, instead of keeping it only in an Authorization header. When you use a prompt in Pocket Prompt, the extension posts the form input you entered as prompt context to api.pocket-prompt.com/event-tag. The same telemetry request includes your account email, the prompt ID, the selected AI platform, authorization data, and source-location headers.

Is Pocket Prompt safe?

Findings