Is Typster - Human Auto Typer for Google Docs safe?

Medium risk

Typster stores your OpenAI API key in Google Docs page storage and sends it to OpenAI for AI typing features.

When you enter an OpenAI API key in Typster on Google Docs, the content script saves the raw key in docs.google.com localStorage under typster_openai_api_key. It later reads that value to call api.openai.com for model validation and chat completions, sending prompts with the key in the Authorization header.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

Typsterv1.5Chrome Web Store
40Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 1.5. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on api.openai.com

    https://api.openai.com/*

  • Run its own code inside the pages you visit

    scripting

  • Act on the current tab, but only after you click the extension

    activeTab

Where it sends data

Destinations our analysis observed Typster - Human Auto Typer for Google Docs contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • api.openai.comwidely used

    Typster - Human Auto Typer for Google Docs sends data to api.openai.com. A widely used service: 57 other extensions we have analysed send data here.

Updated 30 September 2026neeimiofdlidkdmpigafnjkbhccjjaih