Top Risks

• Privacy policy is Google's generic policy — not scoped to this extension, yet admits data collection and third-party sharing (+10 privacy).
• Uninstall URL hijack and install URL hijack both redirect to gameograf.com with UTM tracking (+3.0+2.0 webstore).
• NewTab override + search permission: controls every new tab and can observe search queries for monetization.
• Extension stale 16 months with no CSP and a bit.ly affiliate-cloaking host in js_external_hosts.
• No developer name listed; verified publisher badge present but invariant 0c caps discount due to months_since_update > 18 context (16mo borderline) and generic Google privacy policy.

Evidence

• newtab_override manifest chrome_url_overrides.newtab set to newtab.html — controls every new tab page.
• uninstall_url_hijack crx setUninstallURL targets https://gameograf.com/?utm_source=gameograf — 3rd-party tracking on removal.
• install_url_hijack crx onInstalled opens https://gameograf.com/?utm_source=install — 3rd-party redirect on install.
• generic_privacy_policy store Privacy URL is Google's account policy; scope_extension=false, data_collection=true, third_party_sharing=true.
• affiliate_hit crx bit.ly listed in js_external_hosts — generic short-link redirector flagged as affiliate/cloaking.
• no_csp manifest content_security_policy is null; MV3 default applies but no explicit CSP hardening present.
• stale_extension store Last updated May 2025 but months_since_update=16 (scoring data baseline), within 12-24mo band.
• no_developer_name store developer_name is empty string; identity accountability reduced.

Permissions Breakdown

• search medium Allows reading/intercepting search queries; elevated risk combined with newtab override.
• chrome_url_overrides.newtab medium Replaces every new tab; monetization vector and data collection surface.

Pillar Scores

Bookkeeping