Is TUF Enhancer safe?

Low risk

TUF Enhancer inserts GitHub-hosted problem links into inline click handlers without escaping.

It fetches a question cache from a GitHub Gist and stores the link fields locally. On TakeUForward sheet pages, it injects those remote URLs into added icons' inline onclick handlers, so a crafted cache entry could run script when the icon is clicked.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

Charitra Agarwalv3.1.1Chrome Web Store
15Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 3.1.1. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Store data in your browser

    storage

  • Schedule its own background tasks

    alarms

Updated 30 September 2026fhjplegpfphfnpjheiijbnmecdboefmh