Top Risks

• Privacy policy is Google's generic account policy (scope_extension=false, admits data_collection+third_party_sharing) — rates 10.0 under v3.5 rule D.
• Free-webmail developer (gmail) with no verified business identity raises impersonation/accountability risk.
• manifest_source=html_fallback with 30,000 installs; no permissions or code observable — v3.5 rule B adds +3.0 to webstore.
• NewTab category from anonymous gmail developer with low 3.6 rating warrants scrutiny.
• No code scanned (js_files_scanned=0); capability surface entirely unknown beyond manifest fallback.

Evidence

• html_fallback manifest with 30k installs store manifest_source=html_fallback + install_count=30000 triggers v3.5 rule B +3.0 webstore penalty.
• Generic Google privacy policy store Policy is myaccount.google.com/privacypolicy; scope_extension=false, data_collection=true, third_party_sharing=true → +10.0 privacy (rule D).
• Free-webmail developer store Developer email ztrawhcsmada@gmail.com; no business website, no verified publisher → reputation +1.5.
• No code scanned crx js_files_scanned=0, code_findings_raw=[], obfuscation_score=0.0 — code quality pillar is 0 but surface unknown.
• No bad-host or monetization hits api threat_intel.bad_host_hits=[], monetization_hits=[], affiliate_hits=[] — no active threat-intel signals.
• Rating 3.6 with no review red flags store Rating below 4.0; review_red_flags.match_count=0, no redirect/malware mentions found.
• NewTab category with search_engine_count=0 store No multi-search-engine anomaly; search_redirect_probe not_newtab (probe skipped per data).
• No operator cluster siblings api operator_cluster.sibling_count=0; no coordinated extension network detected.

Pillar Scores

Scoring History

Bookkeeping