Top Risks

• Scope mismatch: <all_urls> and webRequest for a bookmark keyword tool
• Privacy policy is generic Google policy admitting 3rd-party sharing without extension scope
• Install URL hijack: onInstalled opens 3rd-party URL on installation
• Free-webmail developer with no business website or verified dev name
• Low install count (57) with high-tier permissions indicates tail-attack surface

Evidence

• scope_mismatch_all_urls manifest Stated function is bookmark keywords, but requests <all_urls> + webRequest
• generic_privacy_policy api Uses myaccount.google.com policy; scope_extension=false, data_collection=true, third_party_sharing=true
• install_url_hijack manifest chrome.runtime.onInstalled opens a 3rd-party URL
• free_webmail_no_business store Dev email is outlook.com free webmail, no business website, no dev name
• tail_attack_surface api 57 installs with HIGH permissions (webRequest + <all_urls>)
• stale_extension store 16 months since last update (May 2025)
• broad_network_access manifest host_permissions <all_urls> with outbound requests to duckduckgo.com
• verified_publisher_cap store Verified publisher discount capped at -1.0 due to stale > 18mo and generic privacy policy

Permissions Breakdown

• bookmarks medium Reads/modifies bookmarks; core to stated function but exposes browsing organization data.
• tabs medium Access to tab URLs and browsing session data across all sites.
• storage low Local extension storage for settings and preferences.
• webRequest high Intercepts network traffic; combined with <all_urls> provides broad monitoring capability.
• alarms low Schedules periodic code execution; low direct data exposure.
• <all_urls> high Broad host access to every site visited; vastly exceeds stated bookmark keyword function.

Pillar Scores

Bookkeeping