Top Risks

• Brand impersonation: extension claims 'DeepSeek AI' but developer is unverified gmail user with no affiliation to DeepSeek official.
• scripting + <all_urls> content scripts: extension can read/modify content on every website; sent to 12 external AI API hosts including multiple Chinese cloud providers.
• Privacy policy is Google's own policy (myaccount.google.com), not scoped to this extension — admits data collection and third-party sharing with no extension-specific disclosure.
• 12 external JS hosts across 5 countries (CA, CN, HK, IN, US) including Tencent, Alibaba, Baidu, Volcengine — significant geo-diversity and Chinese cloud exposure.
• Install URL hijack flag set; developer is anonymous gmail user with no verifiable identity or business domain.

Evidence

• brand_impersonation store brand_mention.is_impersonation=true, confirmed_owner=false; dev domain is gmail.com. Manifest description explicitly disclaims official affiliation.
• generic_privacy_policy store Privacy URL is Google's own account policy. scope_extension=false, data_collection=true, third_party_sharing=true → +10.0 privacy pillar (v3.5 rule D).
• scripting_plus_all_urls manifest scripting permission + host_permission <all_urls> + content_scripts on <all_urls>: full page read/write on every site.
• external_hosts_geo_diversity crx 12 distinct external hosts across CN, HK, CA, IN, US including Tencent, Alibaba, Baidu, Volcengine, SiliconFlow. country_count=5.
• free_webmail_developer store developer_email=1024jianghu@gmail.com; no business website; dev domain gmail.com — anonymous developer.
• install_url_hijack crx install_url_hijack=true; target null but signal indicates onInstalled opens external URL.
• ai_extension_page_content store AI extension processing page content via scripting+<all_urls>; content forwarded to multiple third-party AI API endpoints.
• csp_sandbox_unsafe_inline manifest sandbox CSP includes unsafe-inline on script-src and loads cdn.jsdelivr.net; extension_pages CSP is strict.

Permissions Breakdown

• storage low Stores local extension settings; limited blast radius.
• contextMenus low Adds right-click menu items; no data access.
• scripting high Allows injecting JS into pages; combined with <all_urls> enables full page read/write.
• commands low Keyboard shortcut binding only.
• tabs medium Access to tab URLs/titles; moderate privacy risk.
• <all_urls> (host_permission) high Grants scripting access to every site the user visits; extreme reach.

Pillar Scores

Scoring History

Bookkeeping