Top Risks

• NewTab override + search permission: full control over every new tab and search query for all users.
• Privacy policy is Google's generic policy (scope_extension=false, data_collection+third_party_sharing=true) — worst-case privacy disclosure.
• Uninstall and install URL hijacks redirect to gameograf.com with UTM tracking — monetization shell pattern.
• No developer name listed; no CSP on MV3 extension with innerHTML DOM-XSS sinks.
• Google-generic privacy policy admits data collection and third-party sharing with no extension-specific scoping.

Evidence

• newtab_override manifest chrome_url_overrides.newtab set to newtab.html — replaces every new tab page.
• uninstall_url_hijack crx setUninstallURL targets gameograf.com with UTM params — monetization tracking on uninstall.
• install_url_hijack crx onInstalled opens gameograf.com with UTM install params — monetization tracking on install.
• generic_privacy_policy store Privacy policy is Google's own policy (myaccount.google.com); scope_extension=false, data_collection=true, third_party_sharing=true.
• dom_xss_sink crx innerHTML assignments from variables in popup.js and calendar.js with no CSP protection.
• no_developer_name store developer_name is empty string; reduces accountability.
• verified_publisher store Extension has verified_publisher=true; partial reputation credit, but no featured badge.
• search_permission_newtab_combo manifest search permission + newtab override together allow interception of all new-tab navigation and search queries.

Permissions Breakdown

• search medium Allows overriding browser search behavior; pairs with NewTab override for full search interception.
• host_permissions: https://api.gameograf.com/* low Scoped to developer's own API domain; single origin, low surface area.
• chrome_url_overrides.newtab medium Replaces every new tab — high reach, monetization surface, pairs with search override.

Pillar Scores

Bookkeeping