Top Risks

• debugger + nativeMessaging (unrecognized publisher) + <all_urls>: full-page data interception and OS-level access on every site
• brand_mention.is_impersonation=true with no verified publisher badge: unverified Anthropic attribution at 9M installs
• Privacy policy not scoped to this extension and admits data collection + third-party sharing; scope_extension=false
• declarativeNetRequestWithHostAccess + scripting + <all_urls>: can rewrite or block any web request silently
• install_url_hijack and uninstall_url_hijack both true; uninstall redirects to Google Forms (data collection signal)

Evidence

• brand_impersonation_flag store brand_mention.is_impersonation=true, confirmed_owner=false, verified_publisher=false; 9M users exposed.
• native_messaging_unrecognized manifest nativeMessaging declared but native_messaging_check.publisher_recognized=false; OS-level access risk.
• debugger_high_perm manifest debugger permission declared alongside <all_urls>; can intercept all page content and network traffic.
• privacy_policy_not_scoped api scope_extension=false, data_collection=true, third_party_sharing=true; policy covers Anthropic broadly, not this extension.
• uninstall_url_hijack crx Uninstall redirects to docs.google.com survey; data-collection pattern on uninstall.
• install_url_hijack crx install_url_hijack=true; onInstalled opens external URL.
• 11_external_js_hosts crx 11 distinct external hosts including api.vimeo.com, chevrotain.io, github.com, react.dev beyond core anthropic domains.
• low_rating_9m_installs store Rating 2.6 at 9M installs; does not trigger red-flag review matches but warrants scrutiny.

Permissions Breakdown

• sidePanel low UI panel only, low risk.
• storage low Local state storage.
• activeTab medium Access to current tab on user action.
• scripting high Can inject scripts into pages; paired with <all_urls> host access.
• debugger high Full debugger attach capability; high-impact, can intercept all page data.
• tabGroups low Manage tab groups, minimal risk.
• tabs medium Read tab URLs and metadata.
• alarms low Scheduled callbacks, minimal risk.
• notifications low Desktop notifications, low risk.
• webNavigation medium Observe navigation events across tabs.
• declarativeNetRequestWithHostAccess high Can modify/block network requests across all URLs.
• offscreen low Background DOM processing, contained risk.
• nativeMessaging high Communicates with native OS apps; companion publisher not recognized.
• unlimitedStorage low No direct exfil risk, but enables large local data accumulation.
• downloads medium Can write files to disk.
• identity low OAuth token access without explicit scopes listed.
• <all_urls> (host) high Content scripts on all URLs; broad reach amplifies every other high permission.

Pillar Scores

Bookkeeping