Top Risks

• Gmail dev email with numbered alias (perfectproducts0) reduces accountability.
• Brand impersonation: 'Twitter/X' brand mentioned, developer not a confirmed owner.
• Privacy policy admits data_collection and third_party_sharing without full retention disclosure.
• No CSP declared; MV3 strict default mitigates but adds minor network risk.
• Featured by Google partially offsets reputation concerns but does not eliminate them.

Evidence

• brand_impersonation store brand_mention.is_impersonation=true, brands=['twitter'], confirmed_owner=false.
• gmail_dev_email store Developer email perfectproducts0@gmail.com — free webmail, numbered alias pattern.
• featured_by_google store is_featured_by_google=true; partially offsets reputation concerns.
• privacy_policy_inadequate api Policy fetched, scope_extension=true, data_collection=true, third_party_sharing=true, retention=false.
• no_csp manifest content_security_policy=null; MV3 default applies, network risk partially mitigated.
• narrow_host_scope manifest content_scripts_matches=['https://x.com/*'] only — tightly scoped to stated function.
• no_code_findings crx code_findings_raw=[], obfuscation_score=0.0, js_external_hosts=[] — clean scan.
• low_installs store 4,000 installs; install_perm_anomaly flags no high-perm concern at this scale.

Permissions Breakdown

• content_scripts: https://x.com/* low Scoped narrowly to x.com only; matches stated function of removing the For You tab.

Pillar Scores

Bookkeeping