Top Risks

• Privacy policy is Google's own policy (scope_extension=false, data_collection=true, third_party_sharing=true) — worst-case generic policy admitting collection and sharing without extension scope.
• Uninstall and install URL hijacks redirect users to gameograf.com tracking URLs on every install/uninstall event.
• NewTab override with search override creates monetization surface; newtab shell pattern with anime wallpaper as thin wrapper.
• No developer name listed; verified publisher but no 'Offered by' display name reduces accountability.
• 16 months since last update; stale for an active newtab extension with tracking hooks.

Evidence

• privacy_policy_generic store Policy URL is Google's own privacy policy; scope_extension=false, data_collection=true, third_party_sharing=true — +10.0 privacy (D clause).
• uninstall_url_hijack crx setUninstallURL → gameograf.com UTM tracking URL; +3.0 webstore per rubric.
• install_url_hijack crx onInstalled opens gameograf.com UTM URL; +2.0 webstore per rubric.
• newtab_override manifest chrome_url_overrides.newtab set; +2.0 webstore (newtab override with monetization shape).
• no_developer_name store developer_name is empty string; +1.0 reputation (no 'Offered by').
• dom_sink_innerhtml crx innerHTML sink in popup.js without CSP present; triggers +2.0 code quality (FIX B).
• verified_publisher_cap store Verified publisher but months_since_update=16 (>18 threshold not met, so cap doesn't apply here); -3.0 rep applied.
• maintenance_stale store 16 months since update falls in 12-24mo band → +6.0 maintenance.

Permissions Breakdown

• search medium Allows overriding search provider; medium risk in newtab context.
• host_permissions: https://api.gameograf.com/* low Scoped to developer's own API domain; low blast radius.
• chrome_url_overrides.newtab medium Replaces new tab page; monetization and data-capture surface.

Pillar Scores

Bookkeeping