Summary Toolbox Chrome extension security report

SUMMARY TOOLBOX A small, fast Chrome extension with two jobs: On a YouTube watch page, it pulls the full transcript into a searchable preview with clickable timestamps. Copy it to clipboard, or download as TXT or SRT. On any other web page, it sends the page's main text to an AI provider you choose and returns a 5-7 bullet summary (adjustable). Save the result to Obsidian or Notion in one click. FEATURES YouTube transcripts: full preview with clickable [mm:ss] chips that seek the player. Search-as-you-type filter, with matches highlighted inline. Toggleable timestamps and "[Music]" stripping: what you see is what gets copied. Download as TXT (with optional timestamps) or SRT (subtitle format). AI summaries: bring your own API key for DeepSeek, OpenAI, Anthropic Claude, OpenRouter, Groq, or Google Gemini. Streams the summary as it generates. Persistent "Custom instruction" prompt: weight every summary toward your priorities (e.g. "key takeaways for beginners"). Save summaries to Obsidian (via Advanced URI plugin) or Notion (via the official API + your integration token). Per-URL summary cache: reopen the popup on a previously-summarised page and the result is restored, with a "Previous summary from Xm ago" caption. Dark mode follows the OS preference automatically. Keyboard shortcut: Cmd+Shift+O / Ctrl+Shift+O. Rebind at chrome://extensions/shortcuts. PRIVACY If you don't configure any AI provider, Summary Toolbox makes zero outbound network requests. Transcripts are read directly from the active tab and stay on your device. All preferences and credentials are stored in chrome.storage.local, never synced. When you do configure a provider, transcript or page text only leaves your device on an explicit click, never automatically. The extension only contacts the host of whichever provider you've configured. No analytics. No telemetry. No third-party SDKs. No remote code. WHY BYOK? Bring-your-own-key keeps the extension free, keeps your prompts off any service we run, and lets you pick the provider that suits your wallet and your priorities. DeepSeek and Groq are extremely cheap; OpenAI and Anthropic give the highest-quality summaries; Gemini has a generous free tier. LIMITS Requires the YouTube video to have captions (manual or auto-generated). Doesn't support YouTube Shorts, live streams, or YouTube Music. Saving to Obsidian requires the Advanced URI community plugin. Saving to Notion requires creating a free Notion integration token.