Is Search Engines Helper safe?

Medium risk

Search Engines Helper sends user-created search engine definitions to http-request-echo-server.onrender.com.

When you add or import a search engine, the extension converts the engine name, search URL, suggestion URL, and image URL into an OpenSearch XML file. Firefox then retrieves that encoded search definition from http-request-echo-server.onrender.com so the search provider can be added.

Soufiane Sakhiv3.5.0Firefox Add-ons
45Risk
Who publishes it

Soufiane Sakhi - no other listings under this identity

What this publisher told the store about itself, and the other listings that told it the same thing.

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Findings

Search engine definitions are sent to a third-party echo service

Adding or importing a search engine makes Search Engines Helper build an OpenSearch XML definition.

That definition, including the search URL, is loaded through http-request-echo-server.onrender.com so Firefox can retrieve it as a provider.

Severity
Medium unwanted
Type
Unexpected
CWE
CWE-359
Source
Dynamic sandbox
What actually happens
You did this

You add or import a search engine definition.

The extension did this

The extension encodes the OpenSearch XML definition and loads it through http-request-echo-server.onrender.com.

Captured request
GEThttps://http-request-echo-server.onrender.com/
Fields in the request
  • Your search URL
    https://example.com/search?q=%s (illustrative)

    This identifies the search endpoint you configured for the custom search engine.

What it can do

Permissions this extension asks for, as declared in version 3.5.0. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Add items to the right-click menu

    contextMenus

  • Act on the current tab, but only after you click the extension

    activeTab

  • Show you desktop notifications

    notifications

Where it sends data

Destinations our analysis observed Search Engines Helper contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • http-request-echo-server.onrender.com

    Search Engines Helper sends data to http-request-echo-server.onrender.com. No other extension we have analysed sends data here.

Updated 30 September 2026amo-917717