Top Risks

• Privacy policy is Google's generic account policy — not scoped to this extension; admits data collection and 3rd-party sharing (+10.0 privacy).
• Developer uses free Gmail address with no verified business domain; free-webmail dev boosts reputation risk.
• Install and uninstall URL hijack flags set (targets null but mechanism present); uninstall redirect is a monetization shell indicator (+3.0 webstore).
• Rating of 3.1 indicates user dissatisfaction at 300K installs; no review red-flags detected but low rating is a trust signal.
• 5 external JS hosts contacted (add0n.com, mybrowseraddon.com, webbrowsertools.com, github.com, mozilla.org) with no CSP; MV3 limits risk but network surface is non-trivial.

Evidence

• privacy_policy_generic store Privacy URL points to Google account policy; scope_extension=false, data_collection=true, third_party_sharing=true → +10.0 privacy pillar.
• install_uninstall_url_hijack crx Both install_url_hijack and uninstall_url_hijack are true (targets null); uninstall hijack alone is +3.0 webstore per rubric.
• free_webmail_developer store Developer email grephyr.prj@gmail.com; no verified business domain. Reputation starts 5.0 +1.5 free-webmail.
• low_rating store Rating 3.1; count unknown. Insufficient data for +1.0 penalty (need >=50 ratings confirmed) — not applied.
• js_external_hosts crx 5 external hosts: add0n.com, github.com, mybrowseraddon.com, webbrowsertools.com, www.mozilla.org. >3 distinct domains +1.5 network.
• is_featured_by_google store Extension is featured by Google (-2.0 reputation discount applied).
• no_csp manifest content_security_policy is null; MV3 so no +2.0 MV2+no-CSP penalty, but dom_sink amplifier path unavailable.
• cve_findings_empty crx No CVE findings; cve_pillar_score = 0.0.

Permissions Breakdown

• storage low Standard key-value storage; limited standalone risk.
• desktopCapture medium Captures screen/audio; core to stated function but sensitive capability.
• unlimitedStorage low Allows unlimited local storage; matches recording use-case.

Pillar Scores

Bookkeeping