Is X Unfollower - Twitter Unfollower safe?
X Unfollower - Twitter Unfollower captures X auth headers to list followed accounts and perform selected unfollows.
The extension reads X/Twitter authorization and CSRF headers from browser requests and stores them locally for its dashboard. It uses those headers with X API endpoints to enumerate followed accounts and send unfollow requests when the user selects accounts to remove.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
What it can do
Permissions this extension asks for, as declared in version 1.0.3. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.
Read and change your data on x.com
*://*.x.com/*
Read and change your data on twitter.com
*://*.twitter.com/*
Read and change your data on echobot.dev
*://*.echobot.dev/*
Store data in your browser
storage
Watch every request your browser makes
webRequest
Where it sends data
Destinations our analysis observed X Unfollower - Twitter Unfollower contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- api.x.com
X Unfollower - Twitter Unfollower sends data to api.x.com. 5 other extensions we have analysed send data here.