Is SDA - Auto Form safe?
SDA - Auto Form reads form questions and answers, stores them locally, and can place them on its SDA share page.
When the user runs its copy action, injected scripts read Google Forms and MyAloha question text plus selected radio, checkbox, and text answers, then store the pairs in chrome.storage.local. If the user clicks Share, the extension opens hdrake1302.github.io/sda-word-extract/ and writes those saved question-answer pairs into the page textarea and data-value field.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
What it can do
Permissions this extension asks for, as declared in version 4.4.1. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.
Read and change your data on docs.google.com
https://docs.google.com/forms/*
Read and change your data on myaloha.vn
https://myaloha.vn/*
Read and change your data on hdrake1302.github.io
https://hdrake1302.github.io/*
Store data in your browser
storage
Act on the current tab, but only after you click the extension
activeTab
Run its own code inside the pages you visit
scripting
Where it sends data
Destinations our analysis observed SDA - Auto Form contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- hdrake1302.github.io
SDA - Auto Form sends data to hdrake1302.github.io. No other extension we have analysed sends data here.