Top Risks

• <all_urls> host access on every site user visits (mitigated by Screenshot/Annotation category fit)
• External scripts/requests to ngrok-free.app and jsdelivr CDN — CSP allows remote script-src
• Function constructor (eval-equivalent) in bundled quill-core.js
• innerHTML DOM-XSS sink on user-controlled content in sidepanel.js
• Privacy policy does not disclose data retention; third-party sharing silence

Evidence

• host_permissions crx host_permissions and content_scripts both <all_urls>; scripting+tabs present.
• csp_remote crx CSP img-src https:, connect-src includes app.lasso.team and hel1.your-objectstorage.com.
• external_hosts crx js_external_hosts: app.lasso.team, e701-170-62-100-144.ngrok-free.app, www.jsdelivr.com.
• install_url_hijack store install_url_hijack=true; target null.
• verified_publisher store verified_publisher=true and is_featured_by_google=true.
• privacy_classification api scoped to extension; collects data; retention not disclosed; third-party silence.
• code_findings crx function_constructor in external/quill-core.js; innerHTML sink in sidepanel.js.
• threat_intel api No bad hosts, monetization, or affiliate hits; operator sibling_count=0.

Permissions Breakdown

• sidePanel low UI surface for sidebar; no data access.
• storage low Local settings persistence.
• tabs medium Can enumerate open tabs, URLs, titles.
• activeTab low Temporary access to current tab on user gesture.
• scripting medium Can inject/execute scripts into pages.
• <all_urls> (host_permissions + content_scripts) high Broad host access to every website; ×1.2 with scripting; justified -1.5 for Screenshot/Annotation.

Pillar Scores

Bookkeeping