Top Risks

• Critical CVE in bundled underscore@1.8.3 (Arbitrary Code Execution) with no CSP amplifier active on MV3.
• cookies + <all_urls> + scripting combo enables full credential/session theft across all sites.
• No CSP present + multiple innerHTML sinks in 5 content scripts + function_constructor = broad XSS surface.
• Developer domain xbuddy.ai does not resolve; verified-publisher discount capped to -1.0 per invariant 0c.
• uninstall_url_hijack and install_url_hijack both flagged; indicates tracking/redirect behaviour on lifecycle events.

Evidence

• critical_cve crx underscore@1.8.3 bundled in googleDocs.js; CVE-2021-23358 Arbitrary Code Execution (fixed in 1.12.1).
• high_cve crx underscore@1.8.3; CVE-2026-27601 DoS via unbounded recursion (fixed in 1.13.8).
• csp_absent manifest content_security_policy is null; MV3 default applies but no explicit CSP hardens against CVE+innerHTML risks.
• dom_xss_sinks crx innerHTML assignment from variable found in 5 content-scripts (content.js, googleDocsGuide.js, localPdfTips.js, selection.js, youtube.js).
• function_constructor crx new Function() in pages/pdf/build/pdf.js and pdf.worker.js; dynamic code execution risk.
• lifecycle_hijack manifest uninstall_url_hijack=true and install_url_hijack=true; extension registers redirect/tracking on install and uninstall.
• developer_domain_non_resolving api xbuddy.ai (dev email domain) does not resolve per threat_intel; caps verified-publisher discount to -1.0.
• ai_page_content store AI extension with <all_urls> content scripts processes arbitrary page content for homework/essay generation.

CVE Exposures (2)

Permissions Breakdown

• tabs medium Exposes URL/title of all open tabs across browsing session.
• storage low Local key-value storage; standard.
• cookies high Can read/write cookies on any domain when paired with <all_urls>.
• activeTab low Scoped to user-triggered action; low standalone risk.
• scripting high Programmatic script injection into any page via broad host access.
• <all_urls> high Unrestricted host access; highest-reach surface.
• file://* high Access to local filesystem via file:// protocol; unusual for AI tool.
• http://*/* high Duplicate broad host; redundant with <all_urls>.
• https://*/* high Duplicate broad host; redundant with <all_urls>.

Pillar Scores

Scoring History

Bookkeeping