Top Risks

• THREAT FEED: extension ID independently confirmed malicious by TPCI chrome-mal-ids — Search GPT for Chrome [data-theft] + malext.io malicious_extension_sentry (+2.5, capped).
• Hotmail dev email + generic AI-tools name: unverifiable developer identity with no accountability.
• Privacy policy is Google's own policy — does not disclose what THIS extension collects; scope_extension==false, data_collection==true, third_party_sharing==true.
• Broad host_permissions *://*/* + content_scripts on all Google TLDs expose every search query to extension code.
• External host chat.searchaitool.net contacted — unknown third-party AI backend with no disclosed data handling.

Evidence

• free_webmail_developer store Developer email chrismartiner.90@hotmail.com is a free webmail address; no verifiable business identity.
• generic_privacy_policy store Privacy URL points to Google's own policy (myaccount.google.com); scope_extension=false, data_collection=true, third_party_sharing=true.
• broad_host_permissions manifest host_permissions *://*/* plus content_scripts on 200+ Google TLDs and major search engines.
• unknown_ai_backend crx js_external_hosts includes chat.searchaitool.net — third-party AI backend with no disclosed ownership or data policy.
• function_constructor crx new Function() constructor in libs/math.min.js; low obfuscation score but dynamic code execution path present.
• no_csp manifest content_security_policy is null; MV3 default helps but no explicit CSP reduces defence-in-depth.
• ai_extension_page_content store AI extension injecting into all search pages; processes user search queries and sends to external backend.
• install_count_threshold store 10,000 installs with free-webmail unverified developer and inadequate privacy policy increases blast radius.
• threat_feed_membership api Extension ID listed by TPCI chrome-mal-ids — Search GPT for Chrome [data-theft] + malext.io malicious_extension_sentry; score 6.10 -> 8.60 (+2.5 cap 2.5).

Permissions Breakdown

• storage low Local key-value storage only; low inherent risk.
• host_permissions: *://*/* high Broad host access grants content-script read/write on every site visited.
• content_scripts: *://*/*oogle.*/search + major engines high Runs code on all Google TLDs and major search engines; reads user search queries.

Pillar Scores

Bookkeeping