Top Risks

• THREAT FEED: extension ID independently confirmed malicious by TPCI chrome-mal-ids — PowerTab - 新标签页 [browser-hijack] + malext.io malicious_extension_sentry (+2.5, capped).
• Privacy policy URL returns SSL error — effectively no fetchable policy; +10.0 privacy pillar.
• NewTab override + AI extension with access to 10+ AI provider APIs including ChatGPT, Claude, Gemini, DeepSeek.
• Developer uses free Chinese webmail (163.com) flagged as throwaway domain; unverified publisher.
• function_constructor usage in bundled libs (jszip, pdf.js) alongside innerHTML DOM sink in pdfobject.

Evidence

• privacy_policy_fetch_error api SSL error fetching http://www.powertab.link/privacy-policy.html; policy unverifiable, scored as not fetched (+10.0 privacy).
• newtab_override manifest chrome_url_overrides.newtab set to index.html; high-reach daily surface with AI and search access.
• throwaway_dev_email store Developer email yungongtec@163.com on 163.com flagged as looks_throwaway=true; free Chinese webmail.
• broad_ai_host_permissions manifest 23 host_permissions covering ChatGPT, Claude, Gemini, DeepSeek, Kimi, Tongyi, ChatGLM APIs.
• csp_connect_src_broad manifest CSP connect-src 'self' https://*; allows outbound connections to any HTTPS host.
• function_constructor_multiple crx new Function() found in 5 files (jszip, pdf.js x2, pdf.worker); in library context but eval-capable.
• dom_xss_sink crx innerHTML assignment in pdfobject.min.js; DOM-XSS risk if PDF URL is user-controlled.
• search_engine_contact api NewTab extension contacts 2 search engines (bing.com, duckduckgo.com); search monetization shape possible.
• threat_feed_membership api Extension ID listed by TPCI chrome-mal-ids — PowerTab - 新标签页 [browser-hijack] + malext.io malicious_extension_sentry; score 5.18 -> 7.68 (+2.5 cap 2.5).

Permissions Breakdown

• storage low Standard local data storage.
• unlimitedStorage low Extended storage quota; low standalone risk.
• activeTab low Transient access to active tab on user action.
• declarativeNetRequest medium Can modify/block network requests declaratively.
• scripting medium Can inject scripts into pages; medium risk without broad host access.
• tabs medium Can read tab URLs and metadata across browser.
• search medium Can manipulate search queries; NewTab context raises risk.
• alarms low Scheduling only; low risk.
• notifications low Can display notifications; minimal risk alone.
• host:api.powertab.link/* medium Dev-controlled API endpoint; unclear data handling.
• host:chat.deepseek.com/* medium Content script target; can read/write AI chat sessions.
• host:api.moonshot.ai/* + api.moonshot.cn/* + kimi.com/* medium Multiple AI provider API hosts; broad AI access surface.
• host:chatgpt.com/* + api.anthropic.com/* + claude.ai/* medium Access to major AI chat platforms including ChatGPT and Claude.
• host:generativelanguage.googleapis.com/* medium Google Gemini API access.
• host:dashscope.aliyuncs.com/* + tongyi.aliyun.com/* medium Alibaba AI API access; cross-border data flow concern.
• host:*.bing.com/* + *.duckduckgo.com/* medium Search engine access; NewTab search routing risk.
• newtab override medium Replaces new-tab page; high-reach daily interaction surface.

Pillar Scores

Bookkeeping