Top Risks

• Privacy policy is Google's generic policy (policies.google.com) — not scoped to this extension; admits data collection and third-party sharing.
• Rating of 2.4 may signal user dissatisfaction, though rating_count unknown.
• Developer name field empty in listing; minor identity gap despite verified publisher.
• Host permissions to docs.google.com and drive.google.com grant access to sensitive document data.
• No install count available, limiting blast-radius assessment.

Evidence

• verified_publisher store Google verified publisher badge; developer_domain google.com resolves, confirmed_owner true, not impersonation.
• generic_privacy_policy store policies.google.com/privacy: scope_extension=false, data_collection=true, third_party_sharing=true → Privacy pillar 10.0 per v3.5 rule D.
• permissions_scoped manifest Only alarms, storage, unlimitedStorage, offscreen + two scoped Google host permissions. No broad host access.
• csp_strict manifest script-src 'self'; object-src 'self' — no unsafe-eval, no remote CDN, MV3.
• no_code_findings crx code_findings_raw empty; obfuscation_score 0.0; 3 JS files scanned with no exfil or eval signals.
• no_cve_findings crx cve_findings_raw empty; no bundled vulnerable JS libraries detected.
• threat_intel_clean api bad_host_hits=[], monetization_hits=[], affiliate_hits=[], looks_throwaway=false, domain age 7493 days.
• low_rating store Rating 2.4; rating_count unknown so +1.0 reputation penalty not applied (threshold requires >=50 ratings).

Permissions Breakdown

• alarms low Schedules background sync tasks; minimal abuse surface.
• storage low Persists offline document data locally; expected for offline tool.
• unlimitedStorage low Required for offline doc caching; no data-exfil capability alone.
• offscreen low MV3 mechanism for background DOM tasks; limited blast radius.
• https://docs.google.com/* medium Scoped host access to Google Docs; matches stated function.
• https://drive.google.com/* medium Scoped host access to Google Drive; matches stated function.

Pillar Scores

Bookkeeping