Top Risks

• Content script on WhatsApp can read all messages; free-webmail dev with no named organization raises exfil risk.
• Privacy policy is Google's generic policy — does NOT scope to this extension; data collection and 3rd-party sharing admitted.
• WhatsApp brand impersonation by unverified gmail developer; confirmed_owner=false.
• install_url_hijack opens web.whatsapp.com on install — minor but signals low-quality packaging.
• 6+ AI provider endpoints in js_external_hosts including deepseek and x.ai not declared in host_permissions — scope mismatch.

Evidence

• brand_impersonation store brands_mentioned=['whatsapp'], confirmed_owner=false, developer_domain=gmail.com — impersonation flagged.
• privacy_policy_generic api Policy URL is Google's own account policy; scope_extension=false, data_collection=true, third_party_sharing=true.
• free_webmail_dev_no_name store developer_email=watoolsmarketing@gmail.com, developer_name empty, no business domain.
• install_url_hijack manifest onInstalled opens https://web.whatsapp.com — minor hijack signal.
• whatsapp_content_script manifest Content script injected into https://web.whatsapp.com/* — reads all chat DOM.
• multiple_ai_endpoints manifest 8 host_permissions to AI providers; js_external_hosts also includes deepseek, x.ai not in host_permissions.
• dom_sink_innerhtml crx innerHTML sink in content.js; CSP present so +0.5 only applies.
• verified_publisher_gmail store verified_publisher=true but email is gmail — cap discount at -1.0 per v3.5(E) due to non-resolving dev domain info null.

Permissions Breakdown

• storage low Stores local extension data.
• activeTab medium Accesses current tab content on user action.
• identity low OAuth identity; no broad scopes declared.
• alarms low Schedules background tasks.
• notifications low Displays browser notifications.
• unlimitedStorage low Unlimited local storage; low direct risk.
• https://web.whatsapp.com/* high Content script on WhatsApp — can read/write all chat content.
• https://upfenix.wasubo.com/* medium Requests to unknown developer backend.
• https://api.openai.com/* medium Sends data to OpenAI API.
• https://api.anthropic.com/* medium Sends data to Anthropic API.
• https://generativelanguage.googleapis.com/* medium Sends data to Google Gemini API.
• https://api.cohere.ai/* medium Sends data to Cohere AI API.
• https://api.groq.com/* medium Sends data to Groq API.
• https://api.mistral.ai/* medium Sends data to Mistral AI API.

Pillar Scores

Bookkeeping