Is Smart Sidebar: Chat GPT, Claude & DeepSeek safe?
We analyzed Smart Sidebar: Chat GPT, Claude & DeepSeek version 2.0.7's actual code and gave it a 58/100 trust score. Useful AI features require unusually…
Bottom line
Useful AI features require unusually broad page access and handling of sensitive user-provided content, with a few design concerns but no confirmed malicious abuse.
What it can access
It runs on every website and can handle selected page text, editable content, files, screenshots, and voice data for AI features.[Q1][Q3][Q5][Q6]
Security weaknesses
A background feature can fetch a supplied web address without checking it, although the reviewed page connection to that feature is disabled.[Q18]
Signs of misuse
The package sends requested AI content and persistent identifiers to its own service, but no unrelated tracking or confirmed misuse was established.[Q6][Q13][Q12]
Code findings
What access does this extension ask for, and does that access make sense for what it claims to do?
It requests all-site access and runs two page access on every ordinary webpage, plus storage, scripting, display, and context-menu capabilities.
Declares all-URL content scripts, <all_urls> host access, and the extension permissions. — manifest.json:27-80
Which websites can it run on, and can it read or change what appears on those pages?
It reads selected text and feature-specific page content such as search results, YouTube captions, and supported email text. The reviewed sending paths are tied to AI features rather than continuous background collection.
Registers selection listeners and implements search, video, email, and page-context helpers. — aitopia/assets/4d4a6d26cfb6412d1f0cb229686323fc.js:35-40
Can it see sensitive information you type, such as passwords, payment details, messages, or form entries?
It can process text from editable fields and supported email interfaces when the user invokes writing, reply, or summarization tools. Passive password or message harvesting was not demonstrated.
Recognizes text inputs and email layouts, captures selected content, and supplies it to AI actions. — aitopia/assets/4d4a6d26cfb6412d1f0cb229686323fc.js:35-40
Can it access private browser data such as cookies, signed-in sessions, browsing history, bookmarks, or downloads?
It stores settings, account/session state, prompts, chat history, files, identifiers, and feature state in extension-local storage; browser history and cookie-store services were not demonstrated.
Initializes stored AI settings, histories, files, account state, and context configuration. — aitopia/assets/4d4a6d26cfb6412d1f0cb229686323fc.js:35-40
Can it access anything else on your device, such as files, location, camera, microphone, clipboard, or installed applications?
It supports user-selected screenshots, file uploads, voice recording, generated-file downloads, and display information. These capabilities are exposed through visible feature controls.
Declares system.display and related extension permissions. — manifest.json:73-80
Implements speech/file features and an interactive screenshot-region selector. — aitopia/assets/4d4a6d26cfb6412d1f0cb229686323fc.js:35,70
Does it send information outside your browser? If so, what information is sent, where does it go, and why?
Requested AI content, files, images, voice data, account state, and identifiers can be sent to AITOPIA services. No confirmed transmission to an unrelated third party was found.
Defines extensions.aitopia.ai and API helpers used for AI, image, speech, authentication, and account requests. — aitopia/assets/4f31556a7f03453726f116c1aad35aa9.js:1,39,46
Builds prompts from selected or feature-specific content and invokes the AI client. — aitopia/assets/4d4a6d26cfb6412d1f0cb229686323fc.js:35-40
Does it download or run code, settings, or instructions supplied by a remote server?
It downloads models, prompts, skills, categories, announcements, and other service data from AITOPIA. These are remote content and settings, not demonstrated executable JavaScript.
Fetches and stores server-provided models, prompts, skills, categories, agents, and announcements. — aitopia/assets/4d4a6d26cfb6412d1f0cb229686323fc.js:35-40
Can it take actions without a clear user request, such as opening pages, redirecting searches, downloading files, or sending requests?
Its content UI and selection/input listeners load automatically on every page. Sensitive cloud requests reviewed here require a user-selected AI action or enabled site integration.
Loads the content scripts on all URLs. — manifest.json:27-51
Installs selection and input listeners and builds the page-integrated UI. — aitopia/assets/4d4a6d26cfb6412d1f0cb229686323fc.js:35-40
Can it change important browser settings, including your proxy, search engine, homepage, privacy settings, or other extensions?
No evidence of this behavior was found in the reviewed package.
Declares no browser-settings, proxy, search override, homepage, or new-tab capability. — manifest.json:1-188
Is any important behavior difficult to inspect because the code is hidden, heavily obfuscated, dynamically generated, or supplied by third parties?
Most application code is shipped as very large minified production bundles. Important data flows remain identifiable, and minification alone is not evidence of misuse.
Large minified application bundle contains the sidebar UI and page integrations. — aitopia/assets/4d4a6d26cfb6412d1f0cb229686323fc.js:1-87
Does it use eval(), new Function(), or string-based timers to turn text into executable code?
No evidence of this behavior was found in the reviewed package.
PDF.js tests dynamic-function support and can compile validated PDF glyph commands or wrap its configured worker URL. — aitopia/assets/b02e8926e5a2cd3b345b70208d0a182d.js:1-9
Uses Manifest V3 and declares no weakened extension-page content-security policy. — manifest.json:73-80
Does it track the websites, pages, searches, or links you visit?
No evidence of this behavior was found in the reviewed package.
Uses window location and page-specific extractors for search and content features. — aitopia/assets/4d4a6d26cfb6412d1f0cb229686323fc.js:35-40
Does not declare the history permission. — manifest.json:73-80
Does it create a persistent ID or browser fingerprint to recognize you?
It creates persistent UUID values and uses them with account, credit, AI, and usage requests to its own service. No unrelated advertising tracker was confirmed.
Includes uuid_search and uuid_hopekey in service state and API requests and regenerates them through the vendor API. — aitopia/assets/4f31556a7f03453726f116c1aad35aa9.js:39,46
Does it send cookies, session details, authentication data, or page contents elsewhere?
No evidence of this behavior was found in the reviewed package.
Does not request the cookies permission. — manifest.json:73-80
Authentication and logout flows target the extension's own AITOPIA service domains. — aitopia/assets/4f31556a7f03453726f116c1aad35aa9.js:46
Does it record typing, form entries, clipboard contents, or screenshots?
It can read selected text from inputs and email editors, record voice after user action, and capture a user-drawn screen region. Continuous keystroke logging or covert screenshot capture was not demonstrated.
Observes selection/input events, implements voice UI, and sends chosen screenshot coordinates to the background capture handler. — aitopia/assets/4d4a6d26cfb6412d1f0cb229686323fc.js:35-40,70
Can a website or remote server send commands that make the extension take actions?
No evidence of this behavior was found in the reviewed package.
AI responses are received through feature-specific send and image APIs and rendered by the extension UI. — aitopia/assets/4f31556a7f03453726f116c1aad35aa9.js:39
Does it alter links, referral codes, advertisements, shopping carts, or search results?
It inserts sidebars, prompts, search-result panels, and context controls into pages. These edits implement its advertised assistant interface.
Loads the assistant content scripts on every page. — manifest.json:27-51
Creates and mounts the sidebar, context popups, and search integration in page DOM. — aitopia/assets/4d4a6d26cfb6412d1f0cb229686323fc.js:35-40
Does it redirect or modify web traffic, request headers, downloads, or proxy settings?
A background message handler can fetch an arbitrary supplied URL without validating its sender or destination. The identified webpage bridge to this handler is dormant in the current build, so active page-controlled fetching was not demonstrated.
action.fetchProxy accepts url and options from a runtime message and passes them directly to fetch. — aitopia/assets/185d03254defdb8039c78c830db1df62.js:1
The component sets useIframe=true and therefore bypasses setupFetchBridge in this package. — aitopia/assets/4d4a6d26cfb6412d1f0cb229686323fc.js:87
Can it communicate with software on the computer or services running on localhost?
It requests system.display for display geometry used by its interface. No native-messaging host, shell command, local process, or broader operating-system control was found.
Declares system.display but not nativeMessaging. — manifest.json:73-80
Does it decode, decrypt, or unpack hidden data and then execute or inject it?
No evidence of this behavior was found in the reviewed package.
Fetches server-managed prompts, skills, agents, and feature data. — aitopia/assets/4d4a6d26cfb6412d1f0cb229686323fc.js:35-40
Imports a fixed packaged service-worker bundle rather than a network URL. — aitopia/service-worker-loader.js:1
Can ordinary websites access privileged extension features through messaging or exposed files?
No evidence of this behavior was found in the reviewed package.
Contains setupFetchBridge but hard-codes useIframe=true before the branch that would call it. — aitopia/assets/4d4a6d26cfb6412d1f0cb229686323fc.js:87
Lists two vendor origin patterns under externally_connectable. — manifest.json:55-72
Does suspicious behavior activate only for certain users, websites, dates, or remote settings?
No evidence of this behavior was found in the reviewed package.
Sets the packaged context default to false. — partner.json:1-14
Implements context toggles and context_black_lists checks per hostname. — aitopia/assets/4d4a6d26cfb6412d1f0cb229686323fc.js:35-40
Does it perform hidden resource-intensive work, such as cryptocurrency mining?
No evidence of this behavior was found in the reviewed package.
Describes AI-assistant scripts and permissions, with no mining-related component or destination. — manifest.json:1-188
Does it change form fields or where a form sends its information?
It can insert AI-generated text into the user's focused editor or supported email reply field after an explicit writing action. No code that changes a form's action URL or silently redirects submitted data was demonstrated.
Tracks the selected editable target and writes generated responses into supported inputs and email editors. — aitopia/assets/4d4a6d26cfb6412d1f0cb229686323fc.js:35-40