Top Risks

• cookies + <all_urls> + scripting: full session token access on every visited site for a gmail-developer extension.
• ChatGPT brand impersonation in title by unverified gmail developer; confirmed is_impersonation=true.
• New-tab override with AI/ChatGPT framing processes page context and controls user's default new-tab destination.
• Privacy policy not scoped to this extension and lacks data-collection disclosure; scope_extension==false, data_collection==false.
• 12 external JS hosts including platform.openai.com, platform.deepseek.com, disperta.com — broad external reach from newtab context.

Evidence

• host_permissions_all_urls manifest <all_urls> paired with cookies, scripting, declarativeNetRequestWithHostAccess — highest capability combo.
• brand_impersonation store brand_mention.is_impersonation=true for 'chatgpt'; developer is gmail user, not OpenAI.
• developer_email_free_webmail store rendom.lab@gmail.com is a free-webmail address with no verified business identity.
• newtab_override manifest chrome_url_overrides.newtab set; controls every new tab opened by user.
• privacy_policy_not_scoped api Policy fetched but scope_extension=false, data_collection=false; does not describe this extension's data practices.
• external_hosts_12 crx 12 external JS hosts including disperta.com, platform.deepseek.com, platform.openai.com, storage.googleapis.com, t.me.
• verified_publisher_featured store verified_publisher=true AND is_featured_by_google=true; discounts apply but capped by gmail dev + impersonation.
• ai_newtab_category store AI+NewTab combo: processes page content/AI APIs while controlling new-tab; elevated exfil surface.

Permissions Breakdown

• storage low Local data persistence; standard for productivity tools.
• idle low Detects idle state; minimal risk.
• unlimitedStorage low Extended local storage; no exfil risk alone.
• tabs medium Can read tab URLs and titles; privacy surface.
• scripting medium Can inject scripts into pages; high-capability when paired with <all_urls>.
• identity medium OAuth token access; can access user identity.
• declarativeNetRequestWithHostAccess high Can modify network requests on all URLs.
• contextMenus low UI element only; low risk.
• alarms low Scheduling; minimal risk.
• notifications low Can show notifications; low risk alone.
• offscreen low Offscreen document; limited surface.
• search medium Can interact with browser search; moderate risk.
• bookmarks medium Read/write bookmarks; user data exposure.
• topSites medium Exposes frequently visited sites; privacy risk.
• sidePanel low UI panel; low risk.
• cookies high Access to cookies across all URLs given <all_urls>; high exfil risk.
• <all_urls> (host_permission) high Broad host access enabling cookies+scripting+declarativeNetRequest on every site.
• newtab override (chrome_url_overrides) medium Replaces new tab; search monetization potential.

Pillar Scores

Bookkeeping