Top Risks

• Brand impersonation: mentions TikTok & Instagram without confirmed ownership, per brand_mention.is_impersonation=true.
• Privacy policy collects data but omits retention period and third-party sharing is ambiguous (third_party_silence=true).
• No developer name listed; identity relies solely on domain whats@updog.marketing.
• Content scripts on major social platforms could scrape user session data even with no host_permissions declared.
• install_count=10,000 with broad social-platform content scripts amplifies reach if extension behavior changes.

Evidence

• brand_impersonation store brand_mention.is_impersonation=true; brands_mentioned=[tiktok,instagram]; confirmed_owner=false.
• verified_publisher_and_featured store verified_publisher=true AND is_featured_by_google=true; reduces reputation risk floor to 2.0.
• content_scripts_social_platforms manifest Content scripts on instagram.com and tiktok.com match stated analytics function.
• privacy_policy_gaps api fetched=true, scope_extension=true, data_collection=true, retention=false, third_party_silence=true.
• no_code_findings crx code_findings_raw=[], obfuscation_score=0.0; clean JS scan.
• no_cve_findings crx cve_findings_raw=[]; no vulnerable bundled libraries detected.
• threat_intel_clean api bad_host_hits=[], affiliate_hits=[], monetization_hits=[]; developer domain resolves, not throwaway.
• recently_updated store months_since_update=0; actively maintained.

Permissions Breakdown

• notifications low Can send desktop notifications; limited scope, no host access pairing.
• storage low Local data persistence only; no exfil path without host permissions.
• alarms low Scheduled callbacks; low risk standalone.
• content_scripts: https://*.instagram.com/* medium Script injection on Instagram pages; matches stated analytics function.
• content_scripts: https://*.tiktok.com/* medium Script injection on TikTok pages; matches stated analytics function.
• content_scripts: https://app.updog.marketing/* low Own app domain; expected for dashboard integration.

Pillar Scores

Bookkeeping