Is Promptmatic: Superpower ChatGPT safe?

Low risk

Promptmatic ships a commented Promptmatic access key and workspace identifiers beside its API request code.

Promptmatic sends authenticated extension operations to its Promptmatic API using access key, host, and workspace headers read from extension storage. The distributed content script also contains a commented block with a specific access key, host ID, and workspace name next to the same request helper; the source does not show that block running by default.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

Wit Worksv1.0.1.8Chrome Web Store
15Risk
Who publishes it

Wit Works SAS - 1 other listing from the same operator, none carrying a finding

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
Wit Works
Declared legal entity
Wit Works SAS
Registered address
149 Av. du Maine, Paris 75014, FR
Registered contact
Moin Uddin

Same operator - 1 listing

Published under a different store account, but sharing the registered address, contact or declared legal entity this one gave the store.

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 1.0.1.8. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Act on the current tab, but only after you click the extension

    activeTab

  • See the address and title of every tab you have open

    tabs

  • Sign you in with your Google account

    identity

  • See the email address of your Google account

    identity.email

  • Store data in your browser

    storage

Where it sends data

Destinations our analysis observed Promptmatic: Superpower ChatGPT contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • promptmatic.wit.works

    Promptmatic: Superpower ChatGPT sends data to promptmatic.wit.works. No other extension we have analysed sends data here.

Updated 30 September 2026dfbbmnaicfnpnlpefbechbahdlblgigc