OpenZero Tab Pilot Chrome extension security report

OpenZero Tab Pilot connects one explicitly approved Brave or Chromium tab to a self-hosted OpenZero node. You choose the tab, grant it, describe a task, and watch each step. The extension inspects a bounded, privacy-reduced view of the page and asks your configured OpenZero node for one structured action at a time. Tab Pilot can navigate, click inspected controls, type into ordinary fields, choose options, scroll, wait, go back, and go forward. New sites pause for the browser's own permission prompt. Consequential clicks and personal-data entry pause for one-time human approval. Safety boundaries: - one explicitly granted tab at a time; - no analytics, advertising, or third-party trackers; - no cookie or browser-history access; - no password, payment-card, secret, token, one-time-code, CAPTCHA, or file upload entry; - no arbitrary JavaScript or model-generated selectors; - visible stop and revoke controls; - session grants clear when the browser or extension restarts. OpenZero is self-hosted. For a remote node, connect through HTTPS, a private VPN, or an SSH tunnel to loopback. The extension refuses plain remote HTTP.