Top Risks

• THREAT FEED: extension ID independently confirmed malicious by TPCI chrome-mal-ids — Cat Sakura Street Pixel Live Wallpaper New Tab [adware] + malext.io malicious_extension_sentry (+2.5, capped).
• Privacy policy URL returns HTTP error — effectively no accessible policy; privacy pillar maxed at 10.0.
• Uninstall and install URL hijacks redirect to developer domain — monetization shell pattern.
• NewTab override is primary surface; combined with uninstall/install hijacks signals traffic monetization.
• Two DOM-XSS innerHTML sinks (popup.js, calendar.js) with no CSP — elevated injection risk.

Evidence

• privacy_policy_fetch_failed api privacy_policy_classification.fetched==false (HTTPError); policy inaccessible — scored +10.0 privacy.
• uninstall_url_hijack manifest uninstall_url_hijack=true → gameograf.com UTM redirect; +3.0 webstore.
• install_url_hijack manifest install_url_hijack=true → gameograf.com UTM redirect on install; +2.0 webstore.
• newtab_override manifest chrome_url_overrides.newtab present — replaces every new tab; +2.0 webstore.
• dom_xss_no_csp crx 2x dom_sink_innerhtml_userctrl findings with csp_present=false; each scores +2.0 per FIX B.
• verified_publisher store verified_publisher=true; applied -3.0 reputation discount (floored at 2.0 after other signals).
• no_developer_name store developer_name is empty string; +1.0 reputation penalty for missing identity.
• maintenance_3_to_6_months store months_since_update=10; falls in 6-12mo band → +3.5 maintenance.
• threat_feed_membership api Extension ID listed by TPCI chrome-mal-ids — Cat Sakura Street Pixel Live Wallpaper New Tab [adware] + malext.io malicious_extension_sentry; score 4.41 -> 6.91 (+2.5 cap 2.5).

Permissions Breakdown

• search medium Can query browser search engine; medium risk for newtab override pattern.
• chrome_url_overrides.newtab medium Replaces new tab page — primary monetization surface for this category.
• host_permissions: https://api.gameograf.com/* low Scoped to developer's own API domain only.

Pillar Scores

Bookkeeping