Top Risks

• Search provider override silently redirects all browser queries to simplepdfsearch.com, a classic search-hijack monetization pattern.
• Developer is a free-webmail Gmail account with no verified business identity, raising accountability concerns.
• Rating of 1.2 signals extremely poor user experience, consistent with unwanted search hijacking complaints.
• Privacy policy admits data collection and third-party sharing but lacks retention disclosure; scoping is minimal.
• No JS files present — extension sole function is search override, making stated 'PDF Search' purpose appear misleading.

Evidence

• search_provider_override manifest chrome_settings_overrides sets is_default:true, routing all searches to simplepdfsearch.com/query?q={searchTerms}.
• free_webmail_developer store Developer email kellychewapples23@gmail.com — free Gmail, no verified business domain.
• very_low_rating store Rating 1.2 — extremely low, consistent with search-hijacking user complaints.
• privacy_policy_gaps api Policy fetched; scope_extension=true, data_collection=true, third_party_sharing=true, retention=false.
• no_js_files crx 0 JS files scanned — extension is purely a search override with no observable code surface.
• installs_10k_search_override store 10,000 installs of a search-hijacking extension amplifies reach of query data exfiltration.
• maintenance_6_12mo store 9 months since last update — moderate staleness band (+3.5).
• search_override_medium_permission manifest chrome_settings_overrides.search_provider scored as MEDIUM per rubric v2 fix (a).

Permissions Breakdown

• chrome_settings_overrides.search_provider (default) medium Hijacks browser default search engine to simplepdfsearch.com; core monetization vector for this type of extension.

Pillar Scores

Bookkeeping