Excelent Question and the simple fact, is that it doesn't ask for password, keys or anything like that. There is no security risk i know of when using the application.
It only uses the publicly available information from coinmarketcap and steemit website's api to provide you with the results.

• I am also preparing a contribution on github and sharing the source code :)