Top Risks

• Privacy policy fetched but scope_extension==false and data_collection==false with only 481 chars — effectively a stub, scores +9.0.
• 8 innerHTML DOM-XSS sinks across content scripts that process AI chat HTML; rendered inside grok.com context raises XSS risk.
• CSP connect-src is wildcard ('*') allowing exfil to any endpoint despite MV3; broad.
• Free-webmail dev (gmail) with no developer name and no verified publisher; accountability gap.
• Content scripts reference chatgpt.com, claude, cocounsel — scope extends well beyond stated Grok export function.

Evidence

• privacy_policy_stub api Policy fetched (481 chars), scope_extension=false, data_collection=false — effectively a placeholder.
• dom_xss_sinks crx 8 innerHTML assignments from variables across 8 JS files including content scripts processing AI HTML.
• csp_connect_src_wildcard manifest connect-src set to '*' — any origin reachable from extension pages despite MV3.
• free_webmail_no_devname store Developer email neocrtxai@gmail.com, developer_name empty, no verified publisher badge.
• install_url_hijack crx install_url_hijack=true — extension opens a URL on install (target null in data).
• broad_host_permissions manifest 16 host_permissions including Yandex cloud, Notion, Dropbox, googleapis, twimg, amazonaws.
• scope_mismatch_content_scripts crx JS external hosts include chatgpt.com, chat.deepseek.com, cocounsel.thomsonreuters.com — beyond Grok.
• featured_by_google store is_featured_by_google=true; provides some legitimacy signal but doesn't offset other risks.

Permissions Breakdown

• storage low Standard local preference storage; minimal risk.
• downloads medium Enables file downloads to user disk; needed for PDF/MD/JSON export.
• downloads.open medium Can open downloaded files automatically; slight abuse potential.
• identity medium OAuth token access; could expose user identity if misused.
• declarativeNetRequest medium Can modify network requests; no broad host override declared here.
• activeTab low Scoped to user-initiated tab interaction only.
• host_permissions:https://*.x.com/* medium Broad access to X/Twitter platform pages beyond stated grok export function.
• host_permissions:https://api.dropboxapi.com/* medium Cloud storage API access; export destination but expands trust surface.
• host_permissions:https://api.notion.com/* medium Notion API access; export destination but expands trust surface.
• host_permissions:https://cloud-api.yandex.net/* medium Yandex cloud API; Russian-hosted endpoint raises data-residency concern.
• host_permissions:https://www.googleapis.com/* medium Broad Google API access; needed for Drive export but wide scope.

Pillar Scores

Bookkeeping