Is SkoleGPT Webudvidelse safe?
SkoleGPT Webudvidelse reads DOM text and screenshots from every active tab and transmits them to llm.dbc.dk using hardcoded API keys.
When used as a page assistant, the extension captures up to 12,000 characters of DOM text and, for vision-capable models, a JPEG screenshot of the active tab, then sends both to the vendor LLM endpoint at llm.dbc.dk. A separate hardcoded key is used to send text to the Danish TTS service at glyph-gate.dbc.dk for audio playback. Both API keys are embedded in plain text in sidepanel.js and are readable by anyone who extracts the extension package.
Part of this rating comes from analysis signals we haven't published as detailed findings yet.
Who publishes itskolegpt - no other listings under this identity
skolegpt - no other listings under this identity
What this publisher told the store about itself, and the other listings that told it the same thing.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Where it sends data
Destinations our analysis observed SkoleGPT Webudvidelse contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- glyph-gate.dbc.dk
SkoleGPT Webudvidelse sends data to glyph-gate.dbc.dk. No other extension we have analyzed sends data here.
- llm.dbc.dk
SkoleGPT Webudvidelse sends data to llm.dbc.dk. No other extension we have analyzed sends data here.