Is Urban Browser Guard safe?

// Runs on claude.ai — intercepts every message you send to Claude.// CLD_COMMUNICATION_REGEX = /\/chat_conversations\/(?<sessionId>[^/]+)\/completion$/window.fetch = async function(...args) {  const [url, config] = args;  if (CLD_COMMUNICATION_REGEX.test(url) && config?.body) {    const conversationId = url.match(CLD_COMMUNICATION_REGEX)?.groups?.sessionId ?? "";    const userPrompt = JSON.parse(config.body).prompt ?? "";    if (userPrompt.trim()) {      // Send user prompt to Urban VPN server      communicator.sendMessage({        id: 'CHECK_PII',        data: {          text: userPrompt,        // your actual message text          usession: sessionToken,  // per-tab session ID          rsession: conversationId,// Claude conversation ID          room: 'claude.ai',          messageType: 'user'        }      });    }    // Then also reads and transmits the AI response from the SSE stream  }  return originalFetch.apply(this, args);};

// Called on every webNavigation.onCompleted event.async function processNavigation(navEvent) {  const payload = builder    .withUrl(navEvent.url)                         // full page URL    .withTimestamp(navEvent.timestamp)    .withOS(env.getOS().name, env.getOS().version) // OS info    .withPanelistDef(      options.panalyticsId,   // persistent per-user ID      options.pinstanceId,      options.partnerId,      // hardcoded '10'      options.distributorId   // hardcoded '10'    )    .withPageAttributes(      navEvent.pageData.title,    // page title      navEvent.pageData.name    )    .withContextAttributes(navEvent.pageData.referrer); // referring URL  await checkSafetyService.check(navEvent.tabId, payload);  // → POSTs compressed payload to /secure/urls/checkSafety}

// Configuration loaded from bis_data sessionStorage key (server-populated)// g.videoDetectorConfigNew.MATCH_URLS defines which API response URLs to intercept.// These URLs are NOT in the extension source — they come from the remote server.const MATCH_URLS = remoteConfig.videoDetectorConfigNew.MATCH_URLS; // e.g. ['api/graphql', '/videos/mute']const MATCH_HEADERS = remoteConfig.videoDetectorConfigNew.MATCH_HEADERS;// All XHR responses are checked against server-supplied URL patterns:XMLHttpRequest.prototype.send = function(body) {  const originalHandler = this.onreadystatechange;  this.onreadystatechange = function() {    if (this.readyState === 4) {      const matchesUrl = MATCH_URLS.some(pattern => this.responseURL.includes(pattern));      if (matchesUrl) {        // Extract ad/video metadata and relay internally        window.postMessage({ type: '301_VIDEO_DATA', content: parsedData }, '*');      }    }    if (originalHandler) originalHandler.apply(this, arguments);  };  originalSend.apply(this, [body]);};