Top Risks

• FORCE BLOCK: management + broad host access — extension can disable security tools AND has full traffic-routing capability.
• cookies + <all_urls> + scripting: can read session cookies and inject code on every site visited.
• management permission is anomalous for an AI homework tool — can enumerate or disable other extensions.
• Privacy policy fetched but scope_extension==false with data_collection+third_party_sharing true: policy admits broad data sharing not scoped to this extension.
• No CSP (MV3 with null CSP) combined with Function constructor findings increases runtime code-execution risk.

Evidence

• cookies + <all_urls> + scripting combo manifest cookies permission paired with <all_urls> and scripting — ×1.2 amplifier applied; can exfiltrate session state from any site.
• management permission scope mismatch manifest management declared by an AI homework assistant; no stated function requires enumerating or disabling other extensions.
• privacy policy not scoped to extension api Policy at questionai.com admits data_collection and third_party_sharing but scope_extension==false; triggers +10.0 privacy pillar (D rule).
• no content_security_policy crx content_security_policy is null on MV3; no CSP mitigations for Function constructor findings.
• function_constructor in two JS files crx new Function() found in chromeos-questionnaire.5bd41089.js and webpage-copilot.688f0baf.js; +2.5 code quality.
• verified publisher + featured by Google store Both signals present; Reputation discounts applied but capped per v3.5(E) because privacy policy is non-scoped.
• AI extension + broad host access store +2.5 Webstore for AI/Gen-AI extension processing page content across all URLs.
• developer name empty store developer_name is empty string; no 'Offered by' display name visible.

Permissions Breakdown

• background low Allows persistent background service worker; low-risk alone.
• activeTab medium Access current tab on user gesture; moderate scope.
• cookies high Can read/write cookies; paired with <all_urls> amplifies risk.
• tabs medium Can enumerate open tabs, read URLs and titles.
• contextMenus low Adds right-click menu items; low standalone risk.
• storage low Local extension storage; low risk.
• scripting high Can inject scripts into pages; broad host access makes this high risk.
• management high Can enumerate/disable other extensions; unusual for an AI homework tool.
• sidePanel low Shows side panel UI; low risk.
• https://*/* high Broad host access to all HTTPS sites; enables content injection everywhere.
• <all_urls> high Full URL access including HTTP; paired with cookies and scripting is critical surface.

Pillar Scores

Scoring History

Bookkeeping