ShadowGPT Monitor — permissions and source code
Monitors employee requests to AI services and helps protect your company from data leaks (ChatGPT, Claude, Gemini, GigaChat, etc.).
- Users
- 8
- Rating
- 5.0 / 5
- Version
- 1.1
- Updated
- March 27, 2026
- Size
- 71.0MiB
- Category
- Make Chrome Yours
What this extension can access
These are the capabilities ShadowGPT Monitor declares in its manifest. Each one is a fact about the shipped code, not a judgement about the extension.
scriptingInject scripts into pages you visit.
tabsSee the URL, title and favicon of every open tab.
alarmsSchedule its own code to run later.
offscreenUse a hidden document for background work.
storageStore its own settings and data locally.
Websites it can read and change
http://localhost:8000/*Read and change your data on localhost:8000.
https://*.300.ya.ru/*Read and change your data on *.300.ya.ru.
https://*.alice.yandex.ru/*Read and change your data on *.alice.yandex.ru.
https://*.bitrix24.com/*Read and change your data on *.bitrix24.com.
https://*.bitrix24.ru/*Read and change your data on *.bitrix24.ru.
https://*.chat.deepseek.com/*Read and change your data on *.chat.deepseek.com.
https://*.chat.mistral.ai/*Read and change your data on *.chat.mistral.ai.
https://*.chat.openai.com/*Read and change your data on *.chat.openai.com.
https://*.chatgpt.com/*Read and change your data on *.chatgpt.com.
https://*.claude.ai/*Read and change your data on *.claude.ai.
https://*.copilot.microsoft.com/*Read and change your data on *.copilot.microsoft.com.
https://*.gemini.google.com/*Read and change your data on *.gemini.google.com.
https://*.gigachat.devices.sberbank.ru/*Read and change your data on *.gigachat.devices.sberbank.ru.
https://*.github.com/*Read and change your data on *.github.com.
https://*.grok.com/*Read and change your data on *.grok.com.
https://*.huggingface.co/*Read and change your data on *.huggingface.co.
https://*.notion.so/*Read and change your data on *.notion.so.
https://*.perplexity.ai/*Read and change your data on *.perplexity.ai.
https://*.poe.com/*Read and change your data on *.poe.com.
https://*.you.com/*Read and change your data on *.you.com.
https://300.ya.ru/*Read and change your data on 300.ya.ru.
https://alice.yandex.ru/*Read and change your data on alice.yandex.ru.
https://bitrix24.com/*Read and change your data on bitrix24.com.
https://bitrix24.ru/*Read and change your data on bitrix24.ru.
https://chat.deepseek.com/*Read and change your data on chat.deepseek.com.
https://chat.mistral.ai/*Read and change your data on chat.mistral.ai.
https://chat.openai.com/*Read and change your data on chat.openai.com.
https://chatgpt.com/*Read and change your data on chatgpt.com.
https://claude.ai/*Read and change your data on claude.ai.
https://console.shadowgpt.app/*Read and change your data on console.shadowgpt.app.
https://copilot.microsoft.com/*Read and change your data on copilot.microsoft.com.
https://gemini.google.com/*Read and change your data on gemini.google.com.
https://gigachat.devices.sberbank.ru/*Read and change your data on gigachat.devices.sberbank.ru.
https://github.com/*Read and change your data on github.com.
https://grok.com/*Read and change your data on grok.com.
https://huggingface.co/*Read and change your data on huggingface.co.
https://notion.so/*Read and change your data on notion.so.
https://perplexity.ai/*Read and change your data on perplexity.ai.
https://poe.com/*Read and change your data on poe.com.
https://you.com/*Read and change your data on you.com.
Get this extension's source code
Download the .crx package or unpack it to read the source, entirely in your browser.
Inside the package
| Manifest version | MV3 |
| Files | 2676 |
| Unpacked size | 275 MiB |
| Download size | 71 MiB |
File types
Code characteristics
- Contains dynamic code evaluation (eval or new Function)
- Loads script code from a remote URL
- Content Security Policy:
script-src 'self' 'wasm-unsafe-eval'; object-src 'self';
Domains referenced in the code
Hostnames that appear in this extension's files. A hostname here means the string is present in the code, not that data is necessarily sent to it.
0.0.0.0300.ya.ruajax.googleapis.comaka.msalexei.roalice.yandex.rubitrix24.combitrix24.rublog.izs.mebugs.chromium.orgbugs.webkit.orgbugzilla.mozilla.orgcdn.jsdelivr.netchaijs.comchat.deepseek.comchat.mistral.aichat.openai.comchatgpt.comclaude.aicode.google.comcodereview.chromium.orgconsole.shadowgpt.appcopilot.microsoft.comdev.opera.comdevelopers.google.comdocs.blackberry.comdocs.python.orgdom.spec.whatwg.orgdomenic.medomenicdenicola.com