Is Salesforce Flow Extension safe?
Salesforce Flow Extension sends Salesforce flow metadata and the current page URL to OpenAI when you ask GPT.
When you open a Salesforce flow, the extension reads the Salesforce session cookie to fetch that flow's metadata from the Salesforce Tooling API. If you click Ask GPT, it sends the parsed flow table, your prompt, selected model, and the current Salesforce page URL to OpenAI using the OpenAI key you provided.
Who publishes itfernandomendes - no other listings under this identity
fernandomendes - no other listings under this identity
What this publisher told the store about itself, and the other listings that told it the same thing.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
What it can do
Permissions this extension asks for, as declared in version 1.1.7. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.
Read and change your data on salesforce.com
https://*.salesforce.com/*
Read and change your data on visual.force.com
https://*.visual.force.com/*
Read and change your data on lightning.force.com
https://*.lightning.force.com/*
Read and change your data on cloudforce.com
https://*.cloudforce.com/*
Read and change your data on visualforce.com
https://*.visualforce.com/*
Read and change cookies, including the ones that keep you signed in
cookies
Where it sends data
Destinations our analysis observed Salesforce Flow Extension contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- api.openai.comwidely used
Salesforce Flow Extension sends data to api.openai.com. A widely used service: 57 other extensions we have analysed send data here.