Is TwList - X/Twitter List Scraper safe?

TwList captures your Twitter/X session headers to replay authenticated GraphQL calls exporting list membership and subscriber data.

The extension watches network requests to Twitter/X's list-member and list-subscriber GraphQL endpoints and stores the bearer token and CSRF headers it sees. It then reuses those credentials, along with the site's own ct0 cookie, to call Twitter/X's own GraphQL API directly and pull the full list of members or subscribers, which it stores locally and lets you export to a spreadsheet. All requests go to Twitter/X's own servers, not a third party.