

Looks to me like they’re essentially redirecting the request from the normal api to do age checks to their own api, and just saying “Sure, they’re an adult” to discord (since that is all the “proper” api tells them). There are easy ways for Discord to fix this. So do not expect it to work for long.
What could be risky? Well it seems to be loading some libraries. What are they doing? Don’t know, didn’t check. Probably just keeping the line count of the actual code down. But, who knows?
The other thing (and they of course do need to do this). They pass the full URL that would be sent to the “proper” api to their own. So if there is some private info about you/your account they usually send on, these guys would have that data too.
Just a quick 5 minute look though. I didn’t look too much into it because, I’m not going to use it :P
EDIT: Looks like they actually detail what they do and it seems to involve actually tricking the age verification api too. Interesting stuff. Still not going to do it.











Well, as I added in the edit. I think they do a bit more and actually fool the verification site since they don’t send the whole image, they do the work locally (which is good, for privacy). So they fake valid looking metadata and then presumably get a signed result back which they dutifully pass on to discord.