Top Risks

• Privacy policy is Google's generic account policy — not scoped to this extension at all, collecting and sharing user data admitted.
• Gmail developer with no business domain; unverifiable identity behind 2M-install extension with <all_urls>.
• install_url_hijack and uninstall_url_hijack flags set; onInstalled/setUninstallURL to undisclosed third-party URL.
• 8 external JS hosts referenced (github, youtube, mybrowseraddon, webbrowsertools, etc.) — broad external linkage with no CSP.
• Rating 3.6 on a 2M-install extension suggests user dissatisfaction; no review red-flags captured but low rating is a quality signal.

Evidence

• install_url_hijack + uninstall_url_hijack both true crx Extension registers onInstalled and setUninstallURL hooks to undisclosed targets — standard monetization shell pattern.
• privacy_policy generic Google account policy store scope_extension=false, data_collection=true, third_party_sharing=true → D clause: +10.0 privacy pillar.
• developer email is gmail.com free-webmail store grephyr.prj@gmail.com; no business domain; domain_age_ct not queried (free_webmail_or_no_email).
• host_permissions <all_urls> + content_scripts <all_urls> manifest Full page access on every site; broad reach for a dark-mode theme extension.
• 8 external JS hosts, no CSP (MV3) crx Hosts: github.com, jakiestfu.com, mjijackson.com, mybrowseraddon.com, opensource.org, stackoverflow.com, webbrowsertools.com, youtube.com.
• is_featured_by_google = true store Featured badge partially mitigates reputation; not verified publisher.
• rating 3.6 on 2M installs store Below-average rating at massive scale; no specific review red-flags detected.
• operator_cluster dev_email sibling_count=4 api Same gmail address linked to 4 sibling extensions by dev_email dimension.

Permissions Breakdown

• storage low Stores user preferences locally; low risk.
• contextMenus low Adds right-click menu items; low risk.
• <all_urls> (host_permissions) high Content script injection on every site; broad reach for a theme tool.

Pillar Scores

Scoring History

Bookkeeping