Skip to main content
ShadowAI Defense GitHub
← All services

wong2 · Browser Extension

ChatGPT for Google (extension)

Block Enterprise tier: Not available DPA: No

Network signatures

Domains: chat.openai.com

SNI patterns: *.openai.com

Client signatures

Browser extensions: ChatGPT for Google (risk: elevated)

Risk profile (1–5)

  • Data exfiltration: 4
  • IP loss: 4
  • Output quality (hallucination / legal): 3
  • Integration risk (OAuth, extensions, agentic): 3

Data egress concerns

  • Search-query content sent alongside organizational identity context
  • Pages viewed when the extension is invoked

Training-use default

Routes through ChatGPT consumer endpoints; data governed by consumer ChatGPT terms unless the user has Enterprise sign-in.

Applicable detection rules