Top Risks

• Privacy policy fetched but scope_extension=false with data_collection=true and third_party_sharing=true — policy admits broad sharing without scoping to this extension.
• <all_urls> host_permission paired with scripting enables JS injection on every site visited.
• No CSP (MV3 default enforced, but absence amplifies code-quality risks from bundled pdfjs Function constructor).
• Privacy policy does not scope data collection to this extension; third-party sharing admitted.
• 12 external JS hosts including hyp.is and hypothes.is annotation servers — annotation content transits external infrastructure.

Evidence

• host_permissions=<all_urls>+scripting manifest Annotation tool requires broad access; justified by category but still high capability surface.
• privacy_policy_scope_extension=false,third_party_sharing=true crx Policy at hypothes.is/privacy fetched; data_collection+third_party_sharing true but not scoped to extension — triggers +10.0 privacy.
• function_constructor in pdfjs crx new Function() in pdfjs/build/pdf.js and pdf.worker.js — standard PDF.js eval-support probe, low exploitation risk.
• no_csp manifest content_security_policy is null; MV3 strict default applies so no network-fetch-eval path, but still noted.
• is_featured_by_google=true store Google-featured badge reduces reputation risk; not verified publisher.
• install_url_hijack+uninstall_url_hijack=true,target=null crx Both install and uninstall URL hooks set but targets are null — no active hijack destination detected.
• no_bad_hosts,no_affiliate,no_monetization api threat_intel shows zero bad-host, affiliate, or monetization hits — clean threat-intel profile.
• cve_findings_raw=empty crx No CVEs found in bundled libraries; CVE pillar = 0.0.

Permissions Breakdown

• scripting medium Can inject JS into pages; paired with <all_urls> host permission, covers all sites.
• storage low Local extension storage only; standard for annotation tools.
• tabs medium Access to tab URLs and metadata; needed for annotation context.
• <all_urls> (host_permission) high Grants content-script injection and network access on every site the user visits.

Pillar Scores

Bookkeeping