Is shikicinema safe?

shikicinema exposes hardcoded Kodik, Shikimori, and Smarthard API credentials in a web-accessible bundle.

The extension marks its JavaScript bundle as web-accessible, so any page that knows the extension ID can fetch it from the browser. That bundle contains hardcoded Kodik, Shikimori, and Smarthard API tokens or OAuth secrets used by the extension, including client secrets and an episode notification token.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.