Top Risks

• Privacy policy fetch failed (HTTP error); cannot verify scope or data handling — scored as no policy.
• Broad host permissions (http://*/*, https://*/*) with scripting and webRequest grant full-page access on every site.
• Privacy pillar scores maximum due to unverifiable policy, but this is a fetch artifact not confirmed bad practice.
• webRequest + broad host access without blocking capability is still high-capability for a credential-handling extension.
• Not verified_publisher on Web Store despite being a recognized commercial product; featured badge partially offsets.

Evidence

• privacy_policy_fetch_failed api privacy_policy_classification.fetched==false due to fetch_error:HTTPError; scored +10.0 per rubric (fetched==false).
• featured_by_google store is_featured_by_google=true; -2.0 reputation discount applied (Follows recommended practices badge).
• broad_host_permissions manifest host_permissions=['http://*/*','https://*/*'] plus content_scripts on same scope; justified for password manager autofill.
• no_code_findings crx code_findings_raw=[] and obfuscation_score=0.0; 113 JS files scanned cleanly.
• no_cve_findings crx cve_findings_raw=[]; no bundled vulnerable libraries detected.
• no_threat_intel_hits api bad_host_hits=[], affiliate_hits=[], monetization_hits=[]; developer domain nordpass.com resolves and not throwaway.
• high_install_good_rating store 7,000,000 installs, rating 4.6; no review red flags detected (match_count=0).
• justified_broad_discount manifest Category=Security/PasswordManager; -1.5 justified-broad-permission discount applied to permissions pillar.

Permissions Breakdown

• alarms low Used for periodic session/token refresh tasks.
• contextMenus low Adds right-click fill options; standard for password managers.
• idle low Detects inactivity for auto-lock; expected in password managers.
• privacy high Can modify Chrome privacy settings; powerful but expected for security tools.
• storage low Stores encrypted vault data locally.
• tabs medium Reads active tab URL for credential matching; standard for autofill.
• webNavigation medium Monitors navigation events to trigger autofill on page load.
• webRequest high Observes network requests; justified for form-detection but elevated capability.
• offscreen low Used for background crypto operations without visible UI.
• scripting medium Injects autofill scripts into pages; required for credential filling.
• http://*/* high Broad host access across all HTTP sites for autofill injection.
• https://*/* high Broad host access across all HTTPS sites for autofill injection.

Pillar Scores

Bookkeeping