Top Risks

• Privacy policy fetched but not scoped to this extension AND admits third-party sharing — scores as data-collection with 3rd-party sharing, no retention.
• Extension last updated 35 months ago; near-abandoned with no active maintenance.
• Brand impersonation signal: YouTube mentioned, developer not confirmed owner; free-webmail dev with no business name.
• Install-URL hijack on install redirects user to chat.openai.com — onInstalled opens 3rd-party URL.
• Content scripts run on both YouTube and ChatGPT, capturing sensitive page content with no CSP and stale codebase.

Evidence

• install_url_hijack crx onInstalled redirects to https://chat.openai.com — 3rd-party URL hijack (+2.0 Webstore).
• privacy_policy_scope_missing_third_party_sharing api Policy fetched; scope_extension=false, data_collection=false, third_party_sharing=true → +10.0 Privacy (v3.5 D).
• brand_impersonation_youtube store brand_mention.is_impersonation=true, confirmed_owner=false, not verified publisher → +2.0 Reputation (v3.2).
• maintenance_stale store 35 months since last update → +8.5 Maintenance pillar.
• free_webmail_no_dev_name store developer_email=gmail.com, developer_name empty → +1.5 Reputation (free-webmail dev no business).
• ai_extension_page_content manifest AI extension with content scripts on YouTube+ChatGPT processing page content (+2.5 Webstore AI signal).
• no_csp crx content_security_policy=null on MV3; no CSP amplifies any future code-quality risk.
• verified_publisher_featured store verified_publisher=true AND is_featured_by_google=true; discounts applied but capped by stale+free-webmail conditions.

Permissions Breakdown

• storage low Stores local extension state; no cross-origin or exfil risk alone.
• content_scripts https://*.youtube.com/* medium Script injected into YouTube pages; can read page content and user activity.
• content_scripts https://chat.openai.com/* medium Script injected into ChatGPT; can read conversation data and inputs.

Pillar Scores

Bookkeeping