Top Risks

• <all_urls> + scripting enables arbitrary script injection on every website the user visits.
• No CSP declared (MV3 default is strict but no explicit policy) amplifies DOM-XSS sinks found in JS.
• Privacy policy hosted on generic qq.com domain, not scoped to this extension; third-party sharing undisclosed.
• Access to local file:// URLs is unusual for a knowledge-base productivity tool.
• Developer (Tencent) not a verified publisher; extension contacts 11 external hosts including debug/pre/test QQ endpoints.

Evidence

• broad_host_plus_scripting manifest <all_urls> host permission combined with scripting API allows arbitrary code injection on any site.
• file_url_access manifest file:///* host permissions grant access to local filesystem URLs; unusual for productivity tool.
• no_csp crx content_security_policy is null; no explicit CSP set, leaving DOM-XSS sinks less constrained.
• dom_xss_sinks crx Two innerHTML-from-variable sinks detected in bundled JS files; DOM-XSS risk on injected content.
• privacy_policy_unscoped store Policy at privacy.qq.com is generic Tencent policy; scope_extension=false, third_party_silence=true.
• external_hosts_debug crx JS contacts ima-debug.qq.com, ima-pre.qq.com, ima-test.qq.com — debug/staging endpoints in production build.
• not_verified_publisher store Developer is Tencent (ima@tencent.com) but no verified publisher badge; confirmed_owner=false.
• geo_diversity api JS hosts span CN, SG, US (3 countries); below threshold of 4 for penalty but notable for data routing.

Permissions Breakdown

• windows low Can read/modify browser windows; moderate but low without other combos.
• <all_urls> high Full host access on every site; paired with scripting amplifies risk significantly.
• *://*/ high Redundant broad host permission; stacked with <all_urls>.
• file:///*/* high Access to local filesystem URLs; unusual for productivity extensions.
• file://*/* high Duplicate local file access permission.
• storage low Stores local extension data; minimal risk alone.
• tabs medium Can read tab URLs and titles across all open tabs.
• activeTab medium Grants temporary access to current tab content on user action.
• scripting high Can inject arbitrary scripts into pages; high capability with <all_urls>.
• contextMenus low Adds right-click menu items; low standalone risk.
• webNavigation medium Monitors navigation events across all tabs; can track browsing patterns.

Pillar Scores

Bookkeeping