Top Risks

• Privacy policy admits data collection and third-party sharing but is NOT scoped to this extension — highest privacy risk tier.
• onInstalled opens a YouTube URL (install_url_hijack); typical onboarding redirect but still a hijack signal.
• Content scripts run on ChatGPT and Claude — capable of reading all AI conversation content.
• No CSP declared on MV3 extension; innerHTML sink in content script raises DOM-XSS exposure.
• 12 distinct external JS hosts contacted including api.wfh.team and dev.wfh.team (non-OpenAI dev endpoints).

Evidence

• privacy_policy_scope_mismatch api Policy fetched but scope_extension=false, data_collection=true, third_party_sharing=true → +10.0 privacy (v3.5 rule D).
• install_url_hijack crx onInstalled redirects to https://youtu.be/u3LSii5XOO8 (+2.0 webstore).
• verified_publisher_featured store verified_publisher=true AND is_featured_by_google=true; reputation floor 2.0 applied.
• external_host_count crx 12 distinct JS external hosts including api.wfh.team and dev.wfh.team; >3 distinct registrable domains (+1.5 network).
• dom_sink_innerhtml_userctrl crx innerHTML user-controlled sink in content script; no CSP present → +2.0 code quality (FIX B).
• content_scripts_ai_platforms manifest Scripts injected into ChatGPT, Claude, Sora — full conversation read access.
• no_csp manifest content_security_policy is null; MV3 has strict default but no explicit CSP declared.
• cve_findings_empty api No CVEs found in bundled libraries; CVE pillar = 0.0.

Permissions Breakdown

• storage low Standard key-value storage; no cross-origin access.
• unlimitedStorage low Extends storage quota; low standalone risk.
• contextMenus low Adds right-click menu items; no data exfil path alone.
• host: https://chat.openai.com/* medium Content-script access to ChatGPT; can read conversation data.
• host: https://chatgpt.com/* medium Content-script access to ChatGPT; can read conversation data.
• host: https://claude.ai/* medium Content-script access to Claude; can read AI conversation data.
• host: https://sora.com/* low Scoped to Sora; matches stated AI-enhancement function.
• host: https://ai.com/* low Scoped to ai.com; matches stated function.
• host: https://chat.com/* low Scoped to chat.com; matches stated function.
• host: https://oaistatic.com/* low OpenAI static asset domain; low standalone risk.

Pillar Scores

Bookkeeping