Is "ChatWall - Anonymise & Mask Private Data for AI" on Firefox Add-ons Safe to Install?

StarObject · firefox · v2.0.4

Secure your AI prompts and maintain digital sovereignty. Mask and anonymise sensitive private data locally on your device before sending it to ChatGPT, Gemini, or other LLMs. ChatWall is a privacy extension that ensures 100% local processing. We prevent private data leaks and ensure GDPR compliance through real-time anonymisation of PII (Personally Identifiable Information). Key Advantages: 🛡️ Client-Side Masking: Your data is masked locally on your device. Sensitive data never leaves your browser. 🔓 Smart Unmasking: Seamlessly restores original data in AI responses, so your workflow remains uninterrupted. 📂 Open Source: Our code is public and audit-ready. Trust is earned through transparency—you can verify exactly how your data is handled. 🔒 Real-Time Protection: Instantly detects names, emails, phones, credit cards, and other private data as you type. ✅ Works with major AI websites: Including ChatGPT, Gemini, and many others ... 💼 Enterprise-Grade Security: Designed for professionals and teams who need to ensure GDPR/CCPA compliance while leveraging the power of modern AI. How it works: 🔒 Masking: You type "[email protected]" ChatWall detects an email and sends "[EMAIL_1]" to the AI. 🔓 Unmasking: When the AI replies " [EMAIL_1]", ChatWall automatically restores it to "[email protected]" on your screen. You work naturally with your real data, but the AI provider only ever sees the anonymous tokens. Why trust us? ✅ 💻 Local-First Architecture: ChatWall is built so your data never leaves your device. All masking and anonymization processes happen strictly within your browser. 🛡️ Securely Isolated: Your input is processed in a secure sandbox, making it invisible to the host AI website. While session data is wiped instantly when you close your tab, your persistent favorites remain stored strictly on your own disk. 🔍 Total Transparency: Trust is earned through transparency. Our code is "Source Available" on GitHub, allowing you or your security team to verify exactly how your data is handled

Risk Assessment

Analyzed
100
out of 100
CRITICAL

295 security findings detected across all analyzers

Firefox extension requesting 15 permissions

Severity Breakdown

0
Critical
144
High
151
Medium
0
Low
0
Info

Finding Categories

144
Malware Signatures
5
Network
142
IoC Indicators

YARA Rules Matched

11 rules(144 hits)
postinstall obfuscation postinstall network communication postinstall file download postinstall system command WarpStrings postinstall persistence mechanism postinstall crypto operations postinstall file manipulation AlertStatementsShouldNotBeUsed postinstall environment access SQLInjection

Requested Permissions

15 permissions
clipboardRead

Read data from your clipboard

High
activeTab
Medium
contextMenus
Low
clipboardWrite
Low
storage
Low
alarms
Low
*://chatgpt.com/*
Low
*://chat.openai.com/*
Low
*://gemini.google.com/*
Low
*://claude.ai/*
Low
*://grok.com/*
Low
*://x.com/i/grok*
Low
*://copilot.microsoft.com/*
Low
*://chat.deepseek.com/*
Low
https://chatwall.io/api/verify-license
Low

About This Extension

Secure your AI prompts and maintain digital sovereignty. Mask and anonymise sensitive private data locally on your device before sending it to ChatGPT, Gemini, or other LLMs. ChatWall is a privacy extension that ensures 100% local processing. We prevent private data leaks and ensure GDPR compliance through real-time anonymisation of PII (Personally Identifiable Information). Key Advantages: 🛡️ Client-Side Masking: Your data is masked locally on your device. Sensitive data never leaves your browser. 🔓 Smart Unmasking: Seamlessly restores original data in AI responses, so your workflow remains uninterrupted. 📂 Open Source: Our code is public and audit-ready. Trust is earned through transparency—you can verify exactly how your data is handled. 🔒 Real-Time Protection: Instantly detects names, emails, phones, credit cards, and other private data as you type. ✅ Works with major AI websites: Including ChatGPT, Gemini, and many others ... 💼 Enterprise-Grade Security: Designed for professionals and teams who need to ensure GDPR/CCPA compliance while leveraging the power of modern AI. How it works: 🔒 Masking: You type "[email protected]" ChatWall detects an email and sends "[EMAIL_1]" to the AI. 🔓 Unmasking: When the AI replies " [EMAIL_1]", ChatWall automatically restores it to "[email protected]" on your screen. You work naturally with your real data, but the AI provider only ever sees the anonymous tokens. Why trust us? ✅ 💻 Local-First Architecture: ChatWall is built so your data never leaves your device. All masking and anonymization processes happen strictly within your browser. 🛡️ Securely Isolated: Your input is processed in a secure sandbox, making it invisible to the host AI website. While session data is wiped instantly when you close your tab, your persistent favorites remain stored strictly on your own disk. 🔍 Total Transparency: Trust is earned through transparency. Our code is "Source Available" on GitHub, allowing you or your security team to verify exactly how your data is handled

Detailed Findings

149 total

YARA Rule Matches

11 rules

Indicators of Compromise

Network indicators, suspicious strings, and potential IoCs extracted during analysis

URLs
24
IP Addresses
13
Domains
105
Strings
142

All Indicators · 142

Domain
detected Domain: chat.openai.com

XIOC detected Domain: chat.openai.com

extracted_from_files

Domain
detected Domain: overlaycontainer.style

XIOC detected Domain: overlaycontainer.style

extracted_from_files

URL
detected URL: http://www.apache.org/licenses/LICENSE-2.0

XIOC detected URL: http://www.apache.org/licenses/LICENSE-2.0

extracted_from_files

URL
detected URL: https://chatwall.io/support.html#docs

XIOC detected URL: https://chatwall.io/support.html#docs

extracted_from_files

URL
detected URL: https://chatwall.io

XIOC detected URL: https://chatwall.io

extracted_from_files

URL
detected URL: https://chatwall.io/terms.html

XIOC detected URL: https://chatwall.io/terms.html

extracted_from_files

URL
detected URL: https://chatwall.io/#pricing

XIOC detected URL: https://chatwall.io/#pricing

extracted_from_files

URL
detected URL: https://chatwall.io/forgot-password.html

XIOC detected URL: https://chatwall.io/forgot-password.html

extracted_from_files

URL
detected URL: https://chatwall.io/img/sc1.png)

XIOC detected URL: https://chatwall.io/img/sc1.png)

extracted_from_files

URL
detected URL: https://chatwall.io/img/sc3.png)

XIOC detected URL: https://chatwall.io/img/sc3.png)

extracted_from_files

URL
detected URL: https://www.youtube.com/watch?v=lpoiyVhf08w)](https://www.youtube.com/watch?v=lpoiyVhf08w)

XIOC detected URL: https://www.youtube.com/watch?v=lpoiyVhf08w)](https://www.youtube.com/watch?v=lpoiyVhf08w)

extracted_from_files

URL
detected URL: https://chatwall.io/index.html#download)

XIOC detected URL: https://chatwall.io/index.html#download)

extracted_from_files

URL
detected URL: https://chatwall.io/support.html)

XIOC detected URL: https://chatwall.io/support.html)

extracted_from_files

URL
detected URL: https://www.conventionalcommits.org/)

XIOC detected URL: https://www.conventionalcommits.org/)

extracted_from_files

URL
detected URL: https://chatwall.io/support.html

XIOC detected URL: https://chatwall.io/support.html

extracted_from_files

Domain
detected Domain: chatwall-toast.show

XIOC detected Domain: chatwall-toast.show

extracted_from_files

Domain
detected Domain: company.com

XIOC detected Domain: company.com

extracted_from_files

Other
detected Email: [email protected]

XIOC detected Email: [email protected]

extracted_from_files

Other
detected Email: [email protected]

XIOC detected Email: [email protected]

extracted_from_files

URL
detected URL: https://github.com/ChatWall-io/chatwall),

XIOC detected URL: https://github.com/ChatWall-io/chatwall),

extracted_from_files

URL
detected URL: http://addons.mozilla.org/ca/crl.pem0N

XIOC detected URL: http://addons.mozilla.org/ca/crl.pem0N

extracted_from_files

URL
detected URL: https://github.com/joelacus/world-cities),

XIOC detected URL: https://github.com/joelacus/world-cities),

extracted_from_files

URL
detected URL: https://github.com/ChatWall-io/chatwall

XIOC detected URL: https://github.com/ChatWall-io/chatwall

extracted_from_files

Domain
detected Domain: grok.com

XIOC detected Domain: grok.com

extracted_from_files

Domain
detected Domain: x.com

XIOC detected Domain: x.com

extracted_from_files

Domain
detected Domain: copilot.microsoft.com

XIOC detected Domain: copilot.microsoft.com

extracted_from_files

Domain
detected Domain: chat.deepseek.com

XIOC detected Domain: chat.deepseek.com

extracted_from_files

Domain
detected Domain: li.menu

XIOC detected Domain: li.menu

extracted_from_files

Domain
detected Domain: b.id

XIOC detected Domain: b.id

extracted_from_files

Domain
detected Domain: creativecommons.org

XIOC detected Domain: creativecommons.org

extracted_from_files

Domain
detected Domain: www.apache.org

XIOC detected Domain: www.apache.org

extracted_from_files

Domain
detected Domain: o.map

XIOC detected Domain: o.map

extracted_from_files

Domain
detected Domain: www.inkscape.org

XIOC detected Domain: www.inkscape.org

extracted_from_files

IP
detected Domain: sodipodi.sourceforge.net

XIOC detected Domain: sodipodi.sourceforge.net

extracted_from_files

Domain
detected Domain: a.id

XIOC detected Domain: a.id

extracted_from_files

Domain
detected Domain: y.style.top

XIOC detected Domain: y.style.top

extracted_from_files

Domain
detected Domain: reopenbadge.style.top

XIOC detected Domain: reopenbadge.style.top

extracted_from_files

Domain
detected Domain: t.top-i.top

XIOC detected Domain: t.top-i.top

extracted_from_files

Domain
detected Domain: window.innerheight-t.top

XIOC detected Domain: window.innerheight-t.top

extracted_from_files

Domain
detected Domain: inputoverlaybackdrop.id

XIOC detected Domain: inputoverlaybackdrop.id

extracted_from_files

Domain
detected Domain: inputoverlaybackdrop.style

XIOC detected Domain: inputoverlaybackdrop.style

extracted_from_files

Domain
detected Domain: g.id

XIOC detected Domain: g.id

extracted_from_files

Domain
detected Domain: r.help

XIOC detected Domain: r.help

extracted_from_files

Domain
detected Domain: o.info

XIOC detected Domain: o.info

extracted_from_files

Domain
detected Domain: inputoverlaycontainer.style.top

XIOC detected Domain: inputoverlaycontainer.style.top

extracted_from_files

Domain
detected Domain: inputoverlaycontainer.style

XIOC detected Domain: inputoverlaycontainer.style

extracted_from_files

Domain
detected Domain: inputoverlaycontainer.id

XIOC detected Domain: inputoverlaycontainer.id

extracted_from_files

Domain
detected Domain: y.id

XIOC detected Domain: y.id

extracted_from_files

Domain
detected Domain: y.style

XIOC detected Domain: y.style

extracted_from_files

Domain
detected Domain: b.style

XIOC detected Domain: b.style

extracted_from_files

Domain
detected Domain: f.id

XIOC detected Domain: f.id

extracted_from_files

Domain
detected Domain: w.style

XIOC detected Domain: w.style

extracted_from_files

Domain
detected Domain: k.style

XIOC detected Domain: k.style

extracted_from_files

Domain
detected Domain: v.id

XIOC detected Domain: v.id

extracted_from_files

Domain
detected Domain: j.style

XIOC detected Domain: j.style

extracted_from_files

Domain
detected Domain: n.target

XIOC detected Domain: n.target

extracted_from_files

Domain
detected Domain: a.style

XIOC detected Domain: a.style

extracted_from_files

Domain
detected Domain: c.style

XIOC detected Domain: c.style

extracted_from_files

Domain
detected Domain: i.id

XIOC detected Domain: i.id

extracted_from_files

Domain
detected Domain: gemini.google.com

XIOC detected Domain: gemini.google.com

extracted_from_files

URL
detected URL: https://chatwall.io/login.html

XIOC detected URL: https://chatwall.io/login.html

extracted_from_files

Domain
detected Domain: m.style

XIOC detected Domain: m.style

extracted_from_files

Domain
detected Domain: m.target

XIOC detected Domain: m.target

extracted_from_files

Domain
detected Domain: a.style.top

XIOC detected Domain: a.style.top

extracted_from_files

Domain
detected Domain: t.style.top

XIOC detected Domain: t.style.top

extracted_from_files

Domain
detected Domain: e.select

XIOC detected Domain: e.select

extracted_from_files

Domain
detected Domain: e.target.id

XIOC detected Domain: e.target.id

extracted_from_files

Domain
detected Domain: n.style

XIOC detected Domain: n.style

extracted_from_files

Domain
detected Domain: o.style

XIOC detected Domain: o.style

extracted_from_files

URL
detected URL: https://creativecommons.org/licenses/by/4.0/

XIOC detected URL: https://creativecommons.org/licenses/by/4.0/

extracted_from_files

Domain
detected Domain: l.style

XIOC detected Domain: l.style

extracted_from_files

Domain
detected Domain: e.target

XIOC detected Domain: e.target

extracted_from_files

Domain
detected Domain: t.style

XIOC detected Domain: t.style

extracted_from_files

Domain
detected Domain: window.open

XIOC detected Domain: window.open

extracted_from_files

Domain
detected Domain: x.target

XIOC detected Domain: x.target

extracted_from_files

Domain
detected Domain: b.target

XIOC detected Domain: b.target

extracted_from_files

Domain
detected Domain: unmaskbtn.style.top

XIOC detected Domain: unmaskbtn.style.top

extracted_from_files

Domain
detected Domain: o.top

XIOC detected Domain: o.top

extracted_from_files

Domain
detected Domain: r.top

XIOC detected Domain: r.top

extracted_from_files

Domain
detected Domain: o.style.top

XIOC detected Domain: o.style.top

extracted_from_files

Domain
detected Domain: decisionpopup.style

XIOC detected Domain: decisionpopup.style

extracted_from_files

Domain
detected Domain: decisionpopup.style.top

XIOC detected Domain: decisionpopup.style.top

extracted_from_files

Domain
detected Domain: r.style

XIOC detected Domain: r.style

extracted_from_files

Domain
detected Domain: e.id

XIOC detected Domain: e.id

extracted_from_files

Domain
detected Domain: e.style

XIOC detected Domain: e.style

extracted_from_files

Domain
detected Domain: e.style.top

XIOC detected Domain: e.style.top

extracted_from_files

Domain
detected Domain: t.target

XIOC detected Domain: t.target

extracted_from_files

Domain
detected Domain: t.top

XIOC detected Domain: t.top

extracted_from_files

Domain
detected Domain: n.top

XIOC detected Domain: n.top

extracted_from_files

Domain
detected Domain: floatbtn.style.top

XIOC detected Domain: floatbtn.style.top

extracted_from_files

Domain
detected Domain: s.style.top

XIOC detected Domain: s.style.top

extracted_from_files

Domain
detected Domain: e.top

XIOC detected Domain: e.top

extracted_from_files

Domain
detected Domain: n.style.top

XIOC detected Domain: n.style.top

extracted_from_files

Domain
detected Domain: n.id

XIOC detected Domain: n.id

extracted_from_files

Domain
detected Domain: chatwall-float-btn.cw

XIOC detected Domain: chatwall-float-btn.cw

extracted_from_files

Domain
detected Domain: floatbtn.id

XIOC detected Domain: floatbtn.id

extracted_from_files

Domain
detected Domain: unmaskbtn.id

XIOC detected Domain: unmaskbtn.id

extracted_from_files

Domain
detected Domain: r.call

XIOC detected Domain: r.call

extracted_from_files

Domain
detected Domain: g.map

XIOC detected Domain: g.map

extracted_from_files

Domain
detected Domain: x.style

XIOC detected Domain: x.style

extracted_from_files

Domain
detected Domain: i.style

XIOC detected Domain: i.style

extracted_from_files

Domain
detected Domain: x.id

XIOC detected Domain: x.id

extracted_from_files

Domain
detected Domain: o.id

XIOC detected Domain: o.id

extracted_from_files

Domain
detected Domain: s.style

XIOC detected Domain: s.style

extracted_from_files

Domain
detected Domain: s.id

XIOC detected Domain: s.id

extracted_from_files

Domain
detected Domain: date.now

XIOC detected Domain: date.now

extracted_from_files

Domain
detected Domain: d.style

XIOC detected Domain: d.style

extracted_from_files

Domain
detected Domain: e.name

XIOC detected Domain: e.name

extracted_from_files

Domain
detected Domain: t.id

XIOC detected Domain: t.id

extracted_from_files

Domain
detected Domain: e.email

XIOC detected Domain: e.email

extracted_from_files

Domain
detected Domain: nodefilter.show

XIOC detected Domain: nodefilter.show

extracted_from_files

Domain
detected Domain: chatwall.io

XIOC detected Domain: chatwall.io

extracted_from_files

Domain
detected Domain: ta23e73ed40aaaa0c017a2cbd0c40f8ab.cfa9e3449137d86d3192b2e8572092c5.addons.mozilla.org

XIOC detected Domain: ta23e73ed40aaaa0c017a2cbd0c40f8ab.cfa9e3449137d86d3192b2e8572092c5.addons.mozilla.org

extracted_from_files

Domain
detected Domain: www.youtube.com

XIOC detected Domain: www.youtube.com

extracted_from_files

Domain
detected Domain: www.conventionalcommits.org

XIOC detected Domain: www.conventionalcommits.org

extracted_from_files

Domain
detected Domain: chatgpt.com

XIOC detected Domain: chatgpt.com

extracted_from_files

Domain
detected Domain: chrome.storage

XIOC detected Domain: chrome.storage

extracted_from_files

Domain
detected Domain: chrome.management

XIOC detected Domain: chrome.management

extracted_from_files

IP
detected IP: ac::bef

XIOC detected IP: ac::bef

extracted_from_files

IP
detected IP: d::bef

XIOC detected IP: d::bef

extracted_from_files

Domain
detected Domain: github.com

XIOC detected Domain: github.com

extracted_from_files

Domain
detected Domain: readme.md

XIOC detected Domain: readme.md

extracted_from_files

Domain
detected Domain: signingca1.addons.mozilla.org

XIOC detected Domain: signingca1.addons.mozilla.org

extracted_from_files

Domain
detected Domain: mozilla.com

XIOC detected Domain: mozilla.com

extracted_from_files

Domain
detected Domain: content-signature.mozilla.org

XIOC detected Domain: content-signature.mozilla.org

extracted_from_files

IP
detected IP: ::bef

XIOC detected IP: ::bef

extracted_from_files

IP
detected IP: ::af

XIOC detected IP: ::af

extracted_from_files

IP
detected IP: a::

XIOC detected IP: a::

extracted_from_files

IP
detected IP: e::af

XIOC detected IP: e::af

extracted_from_files

IP
detected IP: e::bef

XIOC detected IP: e::bef

extracted_from_files

IP
detected IP: c::bef

XIOC detected IP: c::bef

extracted_from_files

IP
detected IP: cb::bef

XIOC detected IP: cb::bef

extracted_from_files

Hash
detected MD5 Hash: cfa9e3449137d86d3192b2e8572092c5

XIOC detected MD5 Hash: cfa9e3449137d86d3192b2e8572092c5

extracted_from_files

URL
detected URL: https://chatwall.io/api/verify-license

XIOC detected URL: https://chatwall.io/api/verify-license

extracted_from_files

URL
detected URL: http://sodipodi.sourceforge.net/DTD/sodipodi-0.dtd

XIOC detected URL: http://sodipodi.sourceforge.net/DTD/sodipodi-0.dtd

extracted_from_files

URL
detected URL: http://www.inkscape.org/namespaces/inkscape

XIOC detected URL: http://www.inkscape.org/namespaces/inkscape

extracted_from_files

URL
detected URL: http://www.inkscape.org/)

XIOC detected URL: http://www.inkscape.org/)

extracted_from_files

IP
detected IP: ::0

XIOC detected IP: ::0

extracted_from_files

Domain
detected Domain: claude.ai

XIOC detected Domain: claude.ai

extracted_from_files

IP
detected Domain: navigator.clipboard.read

XIOC detected Domain: navigator.clipboard.read

extracted_from_files

Domain
detected Domain: overlaycontainer.id

XIOC detected Domain: overlaycontainer.id

extracted_from_files

URL
detected URL: https://chatwall.io)

XIOC detected URL: https://chatwall.io)

extracted_from_files

Security Analysis Summary

Security Analysis Overview

ChatWall - Anonymise & Mask Private Data for AI is a Firefox Add-ons extension published by StarObject. Version 2.0.4 has been analyzed by the Risky Plugins security platform, receiving a risk score of 100/100 (CRITICAL risk) based on 295 security findings.

Risk Assessment

This extension presents critical security risk. Severe issues were detected, potentially including malware indicators, exposed secrets, or dangerous behaviors. Installation is strongly discouraged until these issues are addressed.

Findings Breakdown

  • High: 144 finding(s)
  • Medium: 151 finding(s)

What Was Analyzed

The security assessment covers multiple analysis categories:

  • Malware Detection: YARA rule matching against 2,400+ malware signatures
  • Secret Detection: Scanning for exposed API keys, tokens, and credentials
  • Static Analysis: Code-level security analysis for common vulnerability patterns
  • Network Analysis: Detection of suspicious network communications and endpoints
  • Obfuscation Detection: Identification of code obfuscation techniques

Developer Information

ChatWall - Anonymise & Mask Private Data for AI is published by StarObject on the Firefox Add-ons marketplace. The extension has approximately 3 users.

Recommendation

This extension is not recommended for installation without thorough manual review. Consider alternatives with lower risk scores, or contact the developer to address the identified security concerns.

Frequently Asked Questions

Similar Extensions

Related extensions from the same publisher or marketplace

NativeMind

XMIND LIMITED

CRITICAL 352 users

eOffice Notes Summarizer

Rachayita Labs

CRITICAL 8 users

CNote – Save Web Content as Markdown

itcwc

CRITICAL 4 users

Study Tools voor Magister

QkeleQ10

CRITICAL 1K users

GMX MailCheck for Firefox

1&1 Mail & Media GmbH

CRITICAL 17K users

upStart Neo

Fabio Rodrigues

CRITICAL 4 users