Top Risks

• Brand impersonation: extension name invokes 'Perplexity' brand; developer is unaffiliated gmail user.
• Privacy policy admits data collection + third-party sharing but is not scoped to this extension (generic ai2tex policy).
• Uninstall URL hijack flag set — extension registers an uninstall redirect to an unverified destination.
• Scripting + host permissions over Perplexity AI and NotebookLM allow reading/writing sensitive AI session content.
• Free-webmail developer with no verified business identity; api.gumroad.com contact suggests monetization gating.

Evidence

• brand_impersonation store brand_mention.is_impersonation=true for 'perplexity'; developer domain is gmail.com, confirmed_owner=false.
• privacy_policy_generic_with_data_sharing api Policy fetched; scope_extension=false, data_collection=true, third_party_sharing=true → v3.5 rule D: +10.0.
• uninstall_url_hijack crx uninstall_url_hijack=true; target not captured but flag is set in manifest scan.
• free_webmail_developer store developer_email=okeoke1011@gmail.com; no verified publisher badge, no business website.
• gumroad_host_permission manifest host_permissions include *://api.gumroad.com/* (twice) — payment/license gate tied to host access.
• no_csp manifest content_security_policy=null; MV3 default applies but no explicit CSP declared.
• react_dev_external_host crx js_external_hosts includes react.dev — external JS load from non-CDN dev domain is atypical.
• low_rating store Rating=3.0 on a small-install (606) extension; reputation signal negative.

Permissions Breakdown

• storage low Local key-value storage; low impact alone.
• alarms low Scheduled callbacks; minimal standalone risk.
• scripting medium Programmatic script injection into pages; elevated risk paired with host permissions.
• *://*.perplexity.ai/* medium Host access to Perplexity AI pages; scripting here can read AI conversations.
• *://api.gumroad.com/* medium Payment/license API access; contact with commerce endpoint is unusual for AI helper.
• *://notebooklm.google.com/* medium Host access to Google NotebookLM; scripting can read/write research content.
• *://notebooklm.googleapis.com/* medium API-level access to NotebookLM backend; potential exfil of user data.

Pillar Scores

Bookkeeping