Top Risks

• Privacy policy is Google's generic account policy — does not scope to this extension; admits data collection and third-party sharing (v3.5 D → +10.0 privacy).
• Brand impersonation: extension is named 'Perplexity Omnibox' but developer is kudoai.com, not Perplexity AI; is_impersonation=true, not verified publisher.
• No CSP declared (MV3 has strict default so no MV2 penalty, but cdn.jsdelivr.net and www.perplexity.ai are external JS hosts contacted at runtime).
• Uninstall URL hijack flag set (uninstall_url_hijack=true); destination target is null so full intent unknown but indicates 3rd-party redirect on removal.
• Developer name field is empty; no 'Offered by' display name increases accountability gap.

Evidence

• brand_impersonation store brand_mention.is_impersonation=true; brands_mentioned=['perplexity']; developer domain kudoai.com, confirmed_owner=false, not verified publisher.
• privacy_policy_generic api Policy is Google account policy; scope_extension=false, data_collection=true, third_party_sharing=true → v3.5 D +10.0.
• uninstall_url_hijack crx uninstall_url_hijack=true; target null. Possible 3rd-party redirect on uninstall.
• external_js_hosts crx js_external_hosts: cdn.jsdelivr.net, www.perplexity.ai. No CSP; MV3 default applies.
• no_developer_name store developer_name is empty string; no 'Offered by' display name.
• verified_publisher store verified_publisher=true; kudoai.com resolves; months_since_update=1, no CVEs, no monetization hits — full -3.0 discount applies.
• cve_clean crx cve_findings_raw=[] and code_findings_raw=[]; obfuscation_score=0.0. No code-quality risk detected.
• low_installs store installs=293; install_perm_anomaly.small_install_high_perm=false; tail_attack_surface=false.

Permissions Breakdown

• activeTab low Only activates on current tab on user gesture; no persistent broad host access.

Pillar Scores

Bookkeeping