Top Risks

• Privacy policy is generic Google account policy, not scoped to this extension, yet admits data collection and third-party sharing.
• webRequest + broad host access (*://*/*) allows interception and inspection of all HTTP traffic.
• Free-webmail developer (gmail.com) with no verified business identity; uninstall URL hijack detected.
• 10 external JS hosts contacted including webbrowsertools.com and www.masswerk.at — 4 distinct countries, high geo-diversity.
• 16-month-old update with 200K installs and low 2.9 rating increases abandonment/compromise risk.

Evidence

• broad_host_permission manifest host_permissions: ['*://*/*'] grants access to all URLs alongside webRequest and scripting.
• uninstall_url_hijack crx uninstall_url_hijack=true; uninstall_url_target=null — chrome.runtime.setUninstallURL() redirects on removal.
• privacy_policy_generic store Policy URL is Google account policy; scope_extension=false, data_collection=true, third_party_sharing=true.
• free_webmail_developer store Developer email muyu.biovie@gmail.com; no business domain; domain_age_ct not queried (free_webmail).
• geo_diversity crx JS hosts span 4 countries (CA, IN, NL, US); includes webbrowsertools.com, www.masswerk.at.
• low_rating store Rating 2.9 with 200K installs; below 3.0 threshold indicating user dissatisfaction.
• stale_update store Last updated February 25, 2025 — 16 months since update on a 200K-install extension.
• no_csp manifest content_security_policy is null; MV3 has strict default but absence of explicit CSP noted.

Permissions Breakdown

• webRequest high Can observe all HTTP requests across every site visited.
• *://*/* high Broad host access to all URLs; paired with webRequest raises intercept risk.
• scripting medium Can inject scripts into any page covered by host permissions.
• downloads medium Can initiate and manage file downloads; fits stated function.
• contextMenus low Adds right-click menu items; low standalone risk.
• storage low Local extension storage; low risk.

Pillar Scores

Scoring History

Bookkeeping