Is Wildfire safe?
Wildfire records keystrokes, input values, and form submissions across all websites to build replayable browser automation workflows.
When recording mode is active, the extension captures key events and input field values—including password fields—on every HTTP and HTTPS page, and patches HTMLFormElement.prototype.submit globally to intercept form submissions. Recorded events are stored locally in chrome.storage.local, and users can optionally upload completed workflows to cloud.wildfire.ai. The extension also provides a cookie-clearing workflow step that reads all cookies across all domains.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
What it can do
Permissions this extension asks for, as declared in version 1.3.10. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.
Read and change your data on every site you visit
http://*/ and 2 more
Schedule its own background tasks
alarms
Read whatever you have copied to your clipboard
clipboardRead
Write to your clipboard
clipboardWrite
Add items to the right-click menu
contextMenus
Talk to a program installed on your computer, outside the browser's sandbox
nativeMessaging
Clear your browsing history, cache and cookies
browsingData
Route all of your browsing through a server of its choosing
proxy
Watch every request your browser makes
webRequest
Watch, block and rewrite every request your browser makes
webRequestBlocking
Read and change cookies, including the ones that keep you signed in
cookies
See the address and title of every tab you have open
tabs
See every page you navigate to, as you navigate to it
webNavigation
Store data in your browser
storage
Capture the video and audio of a tab
tabCapture
Show you desktop notifications
notifications
Store an unlimited amount of data in your browser
unlimitedStorage
Attach to pages with the browser's debugger, which can read and rewrite anything on them
debugger
Where it sends data
Destinations our analysis observed Wildfire contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- api.wildfire.ai
Wildfire sends data to api.wildfire.ai. No other extension we have analysed sends data here.
- cloud.wildfire.ai
Wildfire sends data to cloud.wildfire.ai. No other extension we have analysed sends data here.