Is Twitter Bookmarks Downloader - Export X Bookmarks safe?

Clean risk

Twitter Bookmarks Downloader captures your X/Twitter session headers to export, download, and delete your own bookmarks.

The extension's service worker watches network requests to X's GraphQL API and stores the authorization and CSRF headers from your logged-in session. A content script running only on x.com and twitter.com later reuses those headers to fetch, download media from, or delete your bookmarks through X's own API, so the extension can act on your account. Captured session headers stay local to the extension and are not sent to any third-party server; a separate connection to extfox.pro/supabase.co only handles the extension's own paid-tier billing and login, and never carries your X credentials.

Spark Toolsv2.6.0Chrome Web Store
0Risk
Who publishes it

Spark Tools - 2 other listings from the same operator, none carrying a finding

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
Spark Tools

Same store account

2 other listings published from this account, 3k+ users between them, none of them carrying a finding.

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Updated 30 September 2026nfkbcnohjlfnclnhhblgjafldimikcdb