Top Risks

• Free-webmail dev (gmail) with no developer name — unverifiable identity operating on WhatsApp messages.
• Privacy policy is Google's generic policy (not scoped to this extension) yet extension sends WhatsApp data to 6+ AI APIs.
• WhatsApp impersonation: brand_mention.is_impersonation=true, dev is not confirmed owner of WhatsApp.
• Install-URL hijack opens web.whatsapp.com on install — minor but a manipulation signal.
• Content-script on web.whatsapp.com with full read/write access to messages; data sent to multiple unverified AI endpoints.

Evidence

• free_webmail_dev_no_name store developer_email=watoolsmarketing@gmail.com, developer_name empty — no verifiable business identity.
• generic_google_privacy_policy store Privacy URL is myaccount.google.com/privacypolicy — Google's own policy, scope_extension=false, data_collection=true, third_party_sharing=true.
• whatsapp_brand_impersonation store brand_mention.is_impersonation=true; developer domain is gmail.com, confirmed_owner=false.
• install_url_hijack manifest onInstalled opens https://web.whatsapp.com — unsolicited navigation on install.
• multiple_ai_host_permissions manifest host_permissions include 6 AI APIs (OpenAI, Anthropic, Gemini, Cohere, Groq, Mistral) + wasubo.com backend.
• dom_sink_innerhtml crx content.js: innerHTML assigned from variable — DOM-XSS risk inside WhatsApp page context.
• js_external_hosts_broad crx 12 distinct external JS hosts including api.deepseek.com, api.x.ai not declared in host_permissions.
• verified_publisher_capped store verified_publisher=true but free-webmail email; monetization pattern (AI relay) triggers 0c cap at -1.0 discount.

Permissions Breakdown

• storage low Standard key-value storage, low risk.
• activeTab low Access current tab only on user gesture, limited scope.
• identity low OAuth token acquisition; scopes matter but no high-perm alone.
• alarms low Scheduling only, minimal harm potential.
• notifications low Can display notifications; nuisance risk only.
• unlimitedStorage low Removes storage quota; no data-exfil risk alone.
• https://web.whatsapp.com/* high Content-script on WhatsApp — can read/send messages, access contacts.
• https://vision.wasubo.com/* medium Developer backend; extension sends data here — trust depends on dev.
• https://api.openai.com/* medium AI API access; WhatsApp content could be relayed to OpenAI.
• https://api.anthropic.com/* medium AI API; same relay risk as OpenAI.
• https://generativelanguage.googleapis.com/* medium Google Gemini API; potential message content exfil.
• https://api.cohere.ai/* medium Additional AI backend; message relay surface.
• https://api.groq.com/* medium Additional AI backend; message relay surface.
• https://api.mistral.ai/* medium Additional AI backend; message relay surface.

Pillar Scores

Bookkeeping