Is Youtube Summary With AI safe?

Medium risk

Youtube Summary With AI sends page URLs and video metadata to PostHog analytics when users trigger AI features.

When a user requests a YouTube video summary, the extension captures the current page URL and video metadata and transmits them to PostHog via a hardcoded project key. Additionally, JavaScript errors occurring on supported AI chat sites (ChatGPT, Claude, Gemini, Grok, Mistral) also send the page URL and error details to the same PostHog endpoint. Both flows use a persistent random client ID stored locally to identify the user across sessions.

Dictanotev1.23Chrome Web Store
45Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Findings

SeverityMEDIUM
ClassUNWANTED
TypeUnexpected
CWECWE-359
SourceAI SANDBOX

YouTube page details sent to PostHog when you summarize a video

When you summarize a YouTube video, the extension sends analytics data to PostHog at app.posthog.com/batch/.

The request includes the current YouTube page URL and page title, which can identify the video page you are viewing.

01EvidenceCAUSE EFFECT
What actually happens
You did this

You click or use a hotkey to summarize a YouTube video.

The extension did this

The extension sends the current YouTube page URL and page title to PostHog analytics.

02EvidenceNETWORK CAPTURE
Captured request
POSTapp.posthog.com/batch/
03EvidenceFIELD TABLE
Fields in the request
FieldValueWhy it matters
Your YouTube page URL
https://www.youtube.com/watch?v=dQw4w9WgXcQ (illustrative)Shows the exact YouTube page open when you use the summarize feature.
Page title
How to repair a bicycle (illustrative)Describes the video page associated with the summarize action.

Data recipients

app.posthog.com
Updated 17 September 2026leidjgpcaiceoeebkdjfcaeboidcjiea