Top Risks

• debugger + <all_urls> + scripting: full page/traffic control on every site; takeover value is high.
• Anonymous solo dev (gmail, no name, no site, unverified): no accountability for powerful access.
• 6 innerHTML DOM-XSS sinks with no CSP, incl. ai-panel.js rendering remote AI content.
• Install URL hijack flag (onInstalled opens external URL) with null target.
• 12+ external hosts incl. CDN and Vercel backend; broad runtime network surface.

Evidence

• high_perms manifest debugger, scripting, tabs, downloads, declarativeNetRequestWithHostAccess, webNavigation.
• broad_hosts manifest host_permissions and content_scripts both <all_urls>; category-fit discount applied (DevTools).
• dev_identity store gmail dev, empty developer_name, no business site, not verified, not featured.
• install_hijack crx install_url_hijack=true (onInstalled external open), target null.
• code_sinks crx 6x dom_sink_innerhtml_userctrl, 2x debugger_attach, function_constructor (jszip); obfuscation 0.
• csp crx csp_present=false; MV3 default mitigates extension pages but not page-world sinks.
• network_hosts crx 12 external hosts incl cdn.jsdelivr.net, codex-dev-ai.vercel.app; geo count 2; no bad/monetization hits.
• privacy store Policy scoped to extension, collection+3rd-party sharing disclosed, no retention stated.

Permissions Breakdown

• activeTab low User-granted per-tab access on click.
• tabs medium Can enumerate and query open tabs and URLs.
• storage low Local state persistence.
• unlimitedStorage low Expands local storage quota.
• scripting medium Programmatic script injection into pages.
• downloads medium Can trigger file downloads (asset extractor/screenshots).
• declarativeNetRequest medium Can block/modify network requests.
• declarativeNetRequestWithHostAccess high Request modification across all hosts with <all_urls>.
• webNavigation medium Observes navigation events and URLs.
• debugger high Full CDP control over tabs: read/modify page content and traffic.
• alarms low Scheduled tasks.
• host_permissions:<all_urls> high Broad host access; justified by dev-toolkit category but wide attack surface.

Pillar Scores

Bookkeeping