Top Risks

• Privacy policy is generic Google policy admitting collection/sharing without scoping to this extension
• Uninstall and install URL hijacking patterns detected
• Contacts 7+ external domains including social media and AI platforms
• Unverified publisher with no business verification

Evidence

• privacy_policy_generic api Google generic policy, scope_extension=false, admits data collection and 3rd-party sharing
• uninstall_url_hijack manifest chrome.runtime.setUninstallURL() to 3rd party
• install_url_hijack manifest onInstalled opens 3rd-party URL
• broad_external_contacts crx Contacts chatgpt.com, youtube.com, instagram.com, x.com, tabplugins.com
• newtab_override manifest chrome_url_overrides.newtab: newtab.html
• search_permission manifest chrome.search API access
• unverified_publisher store No verified publisher badge or featured status
• active_maintenance store Last updated 1 month ago

Permissions Breakdown

• search medium Chrome search API access
• chrome_url_overrides.newtab medium NewTab override detected in manifest

Pillar Scores

Bookkeeping