Top Risks

• THREAT FEED: extension ID independently confirmed malicious by TPCI chrome-mal-ids — Honor Of A Samurai Monochrome Live Wallpaper [adware] + malext.io malicious_extension_sentry (+2.5, capped).
• Privacy policy URL (haberikra.com) failed to fetch — effectively no privacy policy for a newtab extension.
• Uninstall URL hijack redirects to gameograf.com — classic monetization/tracking shell pattern.
• Install URL hijack opens gameograf.com on install — aggressive traffic acquisition.
• NewTab override combined with search permission creates broad monetization surface for 784 users.

Evidence

• uninstall_url_hijack manifest setUninstallURL → gameograf.com with UTM params; classic shell monetization fingerprint.
• install_url_hijack manifest onInstalled opens gameograf.com with UTM install params — traffic acquisition on install.
• privacy_policy_fetch_failed api privacy_policy_classification.fetched==false (HTTPError); policy on haberikra.com, not dev domain.
• newtab_override manifest chrome_url_overrides.newtab=newtab.html; monetization surface on every new tab.
• dom_xss_sink crx js/popup.js: innerHTML assigned from variable with no CSP; DOM-XSS risk.
• no_developer_name store developer_name is empty string; reduces accountability.
• months_since_update_15 store 15 months since last update; falls in 12-24mo stale band (+6.0 maintenance).
• verified_publisher store verified_publisher=true on gameograf.com which resolves; partial reputation mitigation.
• threat_feed_membership api Extension ID listed by TPCI chrome-mal-ids — Honor Of A Samurai Monochrome Live Wallpaper [adware] + malext.io malicious_extension_sentry; score 5.47 -> 7.97 (+2.5 cap 2.5).

Permissions Breakdown

• search medium Allows reading/manipulating search queries; elevated for a wallpaper/newtab extension.
• host_permission: https://api.gameograf.com/* low Scoped to developer's own API domain; moderate risk if domain changes hands.
• chrome_url_overrides.newtab medium Replaces new-tab page; monetization vector, high user-interaction surface.

Pillar Scores

Bookkeeping