Is WebCopilot.ai - Use GPT on any input box safe?
WebCopilot.ai sends text marked with ai:...; in editable fields to OpenAI for completion.
When you type or paste on many websites, the extension scans editable fields for text wrapped as ai:...;. It sends the marked text to OpenAI's chat completions API using the OpenAI API key saved in Chrome storage, then replaces the field contents with the response.
Who publishes itIndianAppGuy Tech Pvt Ltd - 1 other listing from the same operator, none carrying a finding
IndianAppGuy Tech Pvt Ltd - 1 other listing from the same operator, none carrying a finding
What this publisher told the store about itself, and the other listings that told it the same thing.
Same operator - 1 listing
Published under a different store account, but sharing the registered address, contact or declared legal entity this one gave the store.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
What it can do
Permissions this extension asks for, as declared in version 2.2.0. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.
Read and change your data on every site you visit
<all_urls>
Store data in your browser
storage
See the address and title of every tab you have open
tabs
Where it sends data
Destinations our analysis observed WebCopilot.ai - Use GPT on any input box contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- api.openai.comwidely used
WebCopilot.ai - Use GPT on any input box sends data to api.openai.com. A widely used service: 57 other extensions we have analysed send data here.