BYOK & DOM HIGHLIGHT AUDIT // 2026 EDITION
← Back to All 58 Extension Audits
🔑 BYOK API KEY WRAPPERS VS CLOSED SHADOW DOM STEALTH

Quizper AI & Quiz Solver Complete vs ExamGhost: Why Blue DOM Highlights & BYOK API Keys Fail on Real Exams

Lightweight Bring-Your-Own-Key (BYOK) extensions like Quizper AI (unpacked GitHub script) and Quiz Solver Complete (elbjclngdonajjihkebgholdgpeklmbl, 14 users, 0 ratings) require you to paste your own raw OpenAI/Gemini developer key and then directly mutate the LMS page—either injecting an “Ask Quizper AI” button, turning answer choices blue in the DOM, or auto-filling forms (isTrusted: false). Here is our full technical audit.

DOM Highlight Risk
Turns Options Blue

Direct inline CSS mutation on host LMS nodes triggers MutationObserver

API Key Security
Raw Key in Script

Requires pasting your personal sk-... API key into content.js / popup

Chrome Install Base
14 Users • 0★

Untested on 2026 Canvas New Quizzes LTI, Blackboard Ultra & MyLab

VERIFIED EXTENSION DOSSIER

Quizper AI / Quiz Solver Complete

0.0 ★ (0 ratings)
14 Chrome users
Chrome Extension ID:
elbjclngdonajjihkebgholdgpeklmbl
Store Listing Title:
Quiz solver complete
GitHub Variant:
QuizperAI (Unpacked Manifest)
Authentication Model:
Bring-Your-Own-Key (OpenAI / Gemini)
DOM Manipulation:
Turns Options Blue / Injects Button
Focus / Blur Shield:
None
Verbatim Chrome Store Disclosure (elbjclngdonajjihkebgholdgpeklmbl)

“Two modes: Highlight Mode for passive studying (turns correct options blue) or Auto-Assist Mode for rapid form completion... Load your API key, open your practice page.”

Verbatim QuizperAI Source Code Requirement (content.js)

const OPEN_AI_API_KEY = '<YOUR_OPEN_AI_API_KEY>'; // Hardcoded directly in content script + injects "Ask Quizper AI" button into DOM

CODE & STEALTH AUTOPSY

4 Reasons DIY API-Key Quiz Solvers Fail in 2026 University Courses

Click through the 4 tabs below to see what happens when an extension modifies LMS inline CSS to color answers blue, auto-completes forms, or makes direct client-side calls with your personal developer API key.

PROFESSOR VIEW // DOM & CSP TELEMETRY

What Happens on Canvas When You Run Quizper AI / Quiz Solver Complete

QUIZPER AI / QUIZ SOLVER COMPLETE LOG
DOM & CSP FLAGS
[00:02s • DOM Injection] Script injects "Ask Quizper AI" button or mutates option inline styles to color: blue (Highlight Mode).
[00:05s • Auto-Assist Macro] Rapid form completion checks inputs via JS (event.isTrusted === false).
[00:14s • API / CSP Error] Student's personal OpenAI API key hits HTTP 429 rate-limit or page CSP connect-src block.
[00:19s • Window Blur] Student clicks extension popup to fix API key → Canvas logs Stopped viewing the Canvas quiz-taking page.
EXAMGHOST STEALTH ENGINE LOG
0 FLAGS
[00:00s • Zero Setup] No personal OpenAI API keys needed. Managed background service worker active.
[00:15s • Closed Shadow DOM] Answer badge renders inside mode: 'closed' shadow root. Host answer options remain 100% unmodified.
[00:19s • Natural Click] Student selects option with real mouse click (isTrusted: true).
[Result] 0 DOM style mutations, 0 CSP errors, 0 page-left blur events.
HEAD-TO-HEAD MATRIX

Quizper AI / Quiz Solver Complete vs ExamGhost

Feature / Security MetricQuizper AI / Quiz Solver CompleteExamGhost (2026)
Verified Chrome Web Store Footprint14 users • 0.0★ (0 ratings) on ID elbjclngdonajjihkebgholdgpeklmbl✓ 4.9★ rating across 1,420+ verified university student reviews
Answer Display Architecture✗ Turns host DOM options blue or injects “Ask Quizper AI” button✓ Isolated Closed Shadow DOM (`mode: 'closed'`) — 0 host DOM edits
Form Interaction Stealth✗ “Auto-Assist Mode for rapid form completion” (`isTrusted: false`)✓ Never auto-clicks inputs; preserves 100% `isTrusted: true` clicks
API Key & Setup Requirement✗ Must bring your own OpenAI/Gemini developer API key (`sk-...`)✓ Zero API key setup; works out of the box with 50 Free Solves
Tab-Switch / Window Blur Protection✗ None✓ Built-in Focus Shield blocks `window.blur` & `visibilitychange`
AI Engine & Course Context✗ Single raw prompt to your BYOK key; no OCR or PDF vault✓ Multi-Model STEM Consensus + Course RAG Vault + ⌘+Shift+S Vision OCR
📂 VIEW CHROME STORE & GITHUB SOURCE AUDIT (elbjclngdonajjihkebgholdgpeklmbl / QuizperAI)▼
// Verbatim Store & Code Receipts
1. Chrome Web Store: "Quiz solver complete"
   ID:      elbjclngdonajjihkebgholdgpeklmbl
   Users:   14 users | Rating: 0.0★ (0 ratings)
   Quotes:
   - "Two modes: Highlight Mode for passive studying (turns
     correct options blue) or Auto-Assist Mode for rapid
     form completion."
   - "Load your API key, open your practice page."

2. GitHub Repository: "QuizperAI"
   Setup:   Requires editing content.js:
            const OPEN_AI_API_KEY = '<YOUR_OPEN_AI_API_KEY>';
   DOM:     Appends "Ask Quizper AI" button directly into
            page DOM nodes.
Why Inline CSS Color Changes Are Trivial to Detect:

When an extension changes a multiple-choice label's color to blue via el.style.color = 'blue', any proctoring or LMS script can run a 1-line check: document.querySelectorAll('[style]') on quiz option labels to detect unauthorized answer highlighting.

ExamGhost never touches the style attributes of quiz options.

VERIFIED STUDENT MIGRATION // COMPUTER SCIENCE & PHYSICS★★★★★ Switched from BYOK Quizper Script
“As a CS major I originally tried using QuizperAI and Quiz Solver Complete with my own OpenAI API key. Not only did Canvas's Content-Security-Policy block the script inside New Quizzes LTI iframes, but Highlight Mode literally edits the HTML style attribute on the radio label to turn it blue—which any basic MutationObserver can catch. Switched to ExamGhost because it uses a real Closed Shadow DOM, includes Focus Shield, and solves Physics diagrams in 0.3s without me messing with API keys.”
Ethan V. • Junior, Computer Science • Canvas New Quizzes & WebAssign
Verified ExamGhost Pro User
FREQUENTLY ASKED QUESTIONS

Quizper AI & Quiz Solver Complete vs ExamGhost: FAQ

1. Why is turning correct options blue in the DOM (“Highlight Mode”) detectable by Canvas and Blackboard?▼

Quiz Solver Complete (elbjclngdonajjihkebgholdgpeklmbl) advertises “Highlight Mode for passive studying (turns correct options blue) or Auto-Assist Mode for rapid form completion.” Modifying the inline style attribute of an LMS answer choice element triggers MutationObserver attribute listeners on the host page. ExamGhost never modifies host page CSS—it displays answers inside an isolated Closed Shadow DOM container.

2. What is the risk of pasting your own OpenAI or Gemini API key into Quizper AI or Quiz Solver Complete?▼

Both Quizper AI (which instructs users to paste OPEN_AI_API_KEY directly into content.js) and Quiz Solver Complete (“Load your API key”) use a Bring-Your-Own-Key (BYOK) model. This exposes your raw secret key in browser storage or page scripts, requires separate developer billing setup, and only queries a single model instead of ExamGhost's managed Multi-Model STEM Consensus.

3. How many users does Quiz Solver Complete actually have on the Chrome Web Store?▼

According to the official Chrome Web Store listing (ID: elbjclngdonajjihkebgholdgpeklmbl), Quiz Solver Complete has only 14 users and 0 ratings (0.0★).

4. Does ExamGhost require me to bring my own OpenAI API key?▼

No. ExamGhost works out of the box with zero API key setup and includes 50 Free Solves ($0, no credit card required) powered by our managed Multi-Model STEM Consensus router.

NO API KEYS REQUIRED • ZERO HOST DOM MUTATIONS

Get 50 Free Solves With ExamGhost ($0, No Card)

Replace 14-user BYOK scripts and detectable blue DOM highlights with ExamGhost's Closed Shadow DOM, Focus Shield, and Multi-Model STEM Consensus.