Is Ripple Tool safe?

// Fires in ripple_analytics.js after matchingTrigger() confirms a crisis keyword match.
// trigger.searchTermString = raw lowercase text the user typed (e.g. "howtokillmyself").
// trigger.searchTermDigest = SHA-256 of that string (computed in storage.js).
// sessionId = UUID in localStorage created at first match; persists across the session.
export const trackKeyword = async (trigger, shadowRoot = null) => {
  // DOM lookup for optional Mixpanel impression IDs — null if overlay not yet rendered.
  let rippleMainContainer = shadowRoot
    ? shadowRoot.querySelector("#ripple-main-container")
    : document.getElementById("ripple-main-container");
  const messageOfHopeId = rippleMainContainer?.dataset.mixpanelMessageOfHopeId || null;
  const imageId = rippleMainContainer?.dataset.mixpanelImageId || null;

  const extensionVersion = chrome.runtime.getManifest().version; // "0.9.5"
  const sessionId = localStorage.getItem("ripple_session_id");    // UUID, e.g. "1ff58d43-..."

  // The raw crisis search term is sent here, verbatim, as searchTermString.
  // The Mixpanel SDK base64-encodes the event array and POSTs it to api-js.mixpanel.com.
  // The hardcoded token in config.js routes all events to a fixed Mixpanel project.
  mixpanel.track("Keyword Matched", {
    searchTermString: trigger.searchTermString,  // raw text the user typed — sent in plaintext
    searchTermDigest: trigger.searchTermDigest,  // SHA-256 of the same text
    triggerId: trigger.trigger_id,
    categoryId: trigger.category_id,
    fromURL: trigger.fromUrl,                    // full search engine URL including query string
    messageOfHopeId,
    imageId,
    sessionId,                                   // localStorage UUID
    extensionVersion
  });
  // Mixpanel token 26ca64bde526ee64c0d15e285bd08e45 is hardcoded in config.js:3.
};

extractLLMText(element) {
    if (!element) return "";

    const method = this.domainConfig.textExtractionMethod || "contenteditable";
    let text = "";

    switch (method) {
      case "prosemirror":
        text = this.extractProseMirrorText(element);
        break;
      case "contenteditable":
        text = element.innerText || element.textContent || "";
        break;
      case "input":
        text = element.value || "";
        break;
      default:
        text = element.innerText || element.textContent || element.value || "";
    }

    const placeholder = this.domainConfig.placeholderText;
    if (placeholder && text === placeholder) {
      text = "";
    }

    return text.trim();
  }

export const matchingTrigger = async (searchTerm, triggers) => {
  const searchTermString = searchTerm.join(" ").toLowerCase();
  const searchTermDigest = await digestMessage(searchTermString);
  let matchedObject = triggers[searchTermDigest];

  if (matchedObject) {
    return {
      match: true,
      locale: matchedObject?.locale,
      category_id: matchedObject?.category_id || Category.SUICIDE,
      severity: matchedObject?.severity || DEFAULT_SEVERITY,
      trigger_id: matchedObject?.trigger_id || null,
      searchTermDigest,
      searchTermString,
      fromUrl: true
    };
  }
  ...
}

export const trackKeyword = async (trigger, shadowRoot = null) => {
  const mainDocument = window.top?.document || document;
  let rippleMainContainer = shadowRoot
    ? shadowRoot.querySelector("#ripple-main-container")
    : mainDocument.getElementById("ripple-main-container");
  const messageOfHopeId =
    rippleMainContainer?.dataset.mixpanelMessageOfHopeId || null;
  const imageId =
    rippleMainContainer?.dataset.mixpanelImageId || null;
  const extensionVersion = chrome.runtime.getManifest().version;
  const sessionId = localStorage.getItem("ripple_session_id")

  mixpanel.track("Keyword Matched", {
    searchTermString: trigger.searchTermString,
    searchTermDigest: trigger.searchTermDigest,
    triggerId: trigger.trigger_id,
    categoryId: trigger.category_id,
    fromURL: trigger.fromUrl,
    messageOfHopeId,
    imageId,
    sessionId,
    extensionVersion
  });
};