Top Risks

• THREAT FEED: extension ID independently confirmed malicious by TPCI chrome-mal-ids — Ai Customer Service Assis [data-theft] [divergent] + malext.io malicious_extension_sentry (+2.5, capped).
• Privacy policy URL returns fetch error — policy is effectively unavailable; data handling unknown.
• Developer uses free-webmail (gmail) with no verified business identity.
• innerHTML DOM sink in sidepanel.js could enable XSS if AI API response is attacker-influenced.
• Tiny install base (9) makes independent trust validation impossible.

Evidence

• privacy_policy_fetch_failed api https://crossplanetai.com/privacy returned HTTPError; policy content unverifiable — scored +10.0 privacy.
• free_webmail_developer store Developer email yuzeyuan125@gmail.com; no verified business; no publisher badge — reputation +1.5.
• dom_sink_innerhtml_userctrl crx sidepanel.js sets body.innerHTML from template variable containing AI response data — DOM-XSS risk.
• narrow_permissions manifest Only sidePanel, storage, contextMenus, activeTab + single host permission api.deepseek.com; low capability surface.
• csp_present_mv3 manifest CSP script-src 'self'; object-src 'self' — strict; no remote script loading allowed.
• no_cve_findings crx No CVEs detected in bundled JS libraries; cve_findings_raw empty.
• low_install_count store Only 9 installs; no community validation possible.
• no_operator_siblings api operator_cluster sibling_count=0; no cluster risk detected.
• threat_feed_membership api Extension ID listed by TPCI chrome-mal-ids — Ai Customer Service Assis [data-theft] [divergent] + malext.io malicious_extension_sentry; score 3.61 -> 6.11 (+2.5 cap 2.5).

Permissions Breakdown

• sidePanel low Opens a side panel UI; no data access.
• storage low Local extension storage only.
• contextMenus low Adds right-click menu items; low risk.
• activeTab low Temporary access to current tab on user action only.
• https://api.deepseek.com/* low Narrow host permission scoped to declared AI backend only.

Pillar Scores

Bookkeeping