Top Risks

• Brand impersonation: extension mentions 'Perplexity' but developer is not a confirmed owner of that brand.
• Privacy policy is Google's generic policy (scope_extension=false, data_collection=true, third_party_sharing=true) — scores maximum under v3.5 rule D.
• Developer domain ncnp.go.jp does not resolve, limiting accountability.
• No CSP defined (MV3 provides strict default, but no custom scoping for external hosts felo.ai, openevidence.com, perplexity.ai).
• Small install base (2,000) with unverified publisher and non-resolving developer domain raises tail-risk concern.

Evidence

• brand_impersonation store brand_mention.is_impersonation=true for 'perplexity'; confirmed_owner=false.
• generic_privacy_policy store Privacy URL is Google account policy; scope_extension=false, data_collection=true, third_party_sharing=true → +10.0 privacy.
• developer_domain_not_resolving api threat_intel.developer_domain_info.resolves=false for ncnp.go.jp.
• external_hosts crx js_external_hosts: felo.ai, www.openevidence.com, www.perplexity.ai — 3 distinct domains.
• no_permissions manifest permissions=[], host_permissions=[], content_scripts_matches=[] — minimal declared capability.
• maintenance store months_since_update=6, in 3-6mo band → +1.5.
• no_cve_no_obfuscation crx cve_findings_raw=[], obfuscation_score=0.0, code_findings_raw=[] — no malicious code detected.
• no_bad_hosts_no_affiliate api bad_host_hits=[], affiliate_hits=[], monetization_hits=[] — no threat-intel hits.

Pillar Scores

Bookkeeping