Top Risks

• Uninstall AND install URL both hijack to gameograf.com — confirmed monetization/traffic-farming shell pattern.
• Privacy policy is Google's generic account policy; scope_extension=false + data_collection=true + third_party_sharing=true → worst-case privacy score.
• NewTab override + search permission creates full search-monetization surface with no disclosed data handling.
• Free-webmail developer (halilseker3455@gmail.com), no developer name, no business identity — zero accountability.
• External JS contacts Instagram, Netflix, YouTube, X — far beyond stated wallpaper function; scope mismatch.

Evidence

• install_url_hijack manifest onInstalled opens gameograf.com with UTM tracking params — confirmed monetization redirect.
• uninstall_url_hijack manifest setUninstallURL points to gameograf.com — Webstore +3.0 each for install and uninstall hijack.
• newtab_override manifest chrome_url_overrides.newtab=index.html replaces every new tab with developer content.
• generic_privacy_policy store Policy URL is Google account policy; scope_extension=false, data_collection=true, third_party_sharing=true → Privacy +10.
• free_webmail_no_devname store Developer email is gmail.com, developer_name is empty — no business identity verifiable.
• js_external_hosts_mismatch crx JS contacts instagram.com, netflix.com, youtube.com, x.com — irrelevant to a wallpaper/newtab extension.
• verified_publisher_claimed store verified_publisher=true but dev is free-webmail gmail; discount capped by monetization pattern (v3.5 invariant E).
• new_tab_monetization_pattern manifest NewTab override + search perm + install/uninstall URL hijack to ad-tracked domain = textbook monetization shell.

Permissions Breakdown

• search medium Allows reading/manipulating search queries; combined with newtab override creates full search monetization surface.
• chrome_url_overrides.newtab high Replaces every new tab with developer-controlled page; core monetization vector for this extension.

Pillar Scores

Bookkeeping