Top Risks

• AI extension reads page content on every site (<all_urls>) and sends it to nano-gpt.com
• Privacy policy admits data collection + third-party sharing without extension scope
• innerHTML DOM-XSS sink in popup.js with no CSP set
• Only 449 installs with broad host access — small-install/high-perm anomaly

Evidence

• broad_host_access crx host_permissions <all_urls> plus content_scripts_matches <all_urls>
• ai_page_content store AI assistant promising summarize/explain/translate with page context
• privacy_policy_generic_admits_sharing api Fetched; scope_extension=false, data_collection=true, third_party_sharing=true
• dom_sink_innerhtml crx popup.js innerHTML from variable; no CSP present
• verified_publisher store Web Store verified publisher; domain resolves, CT age ~1098 days
• install_perm_anomaly api 449 installs with high-tier permission set (small_install_high_perm)
• network_single_host crx Only external host nano-gpt.com; geo diversity 1 country; no bad/monetization hits
• fresh_maintenance store Updated 0 months ago; MV3; no CVE findings; obfuscation 0.0

Permissions Breakdown

• activeTab low Temporary access to active tab on user invocation only
• storage low Local settings/state persistence
• sidePanel low UI surface declaration, no data access
• contextMenus low Adds context menu entries; low standalone risk
• scripting medium Programmatic script injection into pages
• host:<all_urls> high Broad host access on all sites plus content_scripts <all_urls>

Pillar Scores

Bookkeeping