Is Prompt Engine Pro safe?

Medium risk

Prompt Engine Pro stores its API token as a page-readable cookie on ChatGPT pages.

When you validate a token, the content script sends it to promptenginepro.com and then writes the returned token into document.cookie on chat.openai.com and chatgpt.com. That cookie is not HttpOnly, so scripts running on those ChatGPT pages can read the Prompt Engine Pro token while the extension uses it for categories, prompts, workspace, and history requests.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

Jargon Handlersv3.2Chrome Web Store
40Risk
Who publishes it

Jargon Handlers - no other listings under this identity

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
Jargon Handlers

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Where it sends data

Destinations our analysis observed Prompt Engine Pro contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • promptenginepro.com

    Prompt Engine Pro sends data to promptenginepro.com. No other extension we have analysed sends data here.

Updated 30 September 2026ejhhapgobiifcmemobjkenidcghcmpnn