Top Risks

• Brand impersonation: uses 'Perplexity' brand name; developer is unaffiliated gmail user, not confirmed owner.
• Privacy policy admits data collection and third-party sharing without specifying retention period.
• No developer name listed; free-webmail identity increases accountability gap.
• dom_sink_innerhtml_userctrl in bundled JS; no CSP amplifies DOM-XSS risk on perplexity.ai pages.
• AI extension processing page content on perplexity.ai with scripting + unlimitedStorage access.

Evidence

• brand_impersonation store brand_mention.is_impersonation=true, confirmed_owner=false; uses 'Perplexity' brand with gmail dev.
• verified_publisher_featured store verified_publisher=true AND is_featured_by_google=true; reduces reputation risk.
• privacy_policy_gaps api scope_extension=true, data_collection=true, third_party_sharing=true, retention=false.
• dom_xss_sink crx dom_sink_innerhtml_userctrl in cplx-chunk-Dz0bLWyz.js; no CSP present (MV3 strict default applies).
• no_developer_name store developer_name is empty string; identity accountability relies solely on email.
• external_hosts crx 12 external JS hosts including cdn.cplx.app, socket.io, ko-fi.com, paypal.me, plantuml.com.
• ai_extension_page_content manifest AI category + scripting + content_scripts on perplexity.ai; processes AI query/response content.
• no_cve_findings crx cve_findings_raw is empty; no known vulnerable libraries detected.

Permissions Breakdown

• storage low Local preference persistence; low risk alone.
• unlimitedStorage low Extends storage quota; no direct data-exfil capability.
• contextMenus low Adds right-click menu items; limited attack surface.
• scripting medium Can inject scripts into host pages; scoped to perplexity.ai only.
• https://www.perplexity.ai/* medium Host permission scoped narrowly to Perplexity; not broad.
• https://perplexity.ai/* medium Same narrow scope as above.

Pillar Scores

Bookkeeping