Top Risks

• webRequest + cookies + scripting combo enables session/cookie observation even without broad host_permissions.
• Uninstall URL hijack set; redirects user on removal (destination null but mechanism present).
• No content_security_policy declared (MV3 strict default mitigates but adds no extra protection here).
• Google Analytics endpoint contacted; telemetry collected on 1M+ installs.
• developer_name field empty despite verified publisher — attribution gap for enterprise audit.

Evidence

• verified_publisher+featured store Verified publisher badge and Google Featured; strong trust signals — reputation floored at 2.0.
• uninstall_url_hijack manifest chrome.runtime.setUninstallURL() called; destination null but mechanism is present.
• high_permissions_combo manifest webRequest + cookies + scripting declared without broad host_permissions; capability significant.
• google_analytics_telemetry crx www.google-analytics.com in js_external_hosts; classified as telemetry-tier monetization hit.
• privacy_policy_adequate api Policy fetched; scope_extension=true, data_collection=true, retention=true, third_party_sharing=true, third_party_silence=false.
• no_cve_findings crx cve_findings_raw empty; no bundled vulnerable libraries detected.
• no_code_findings crx code_findings_raw empty; obfuscation_score=0.0; 16 JS files scanned cleanly.
• install_count_1m store 1,000,000 installs; large blast radius but popularity-as-trust discount partially offsets.

Permissions Breakdown

• notifications medium Can push desktop notifications; medium nuisance/phishing vector without host access.
• tabs medium Read tab URLs and metadata; needed for refresh/monitor function.
• storage low Local config storage; low risk.
• unlimitedStorage low Extended storage quota; low risk, data stays local.
• contextMenus low Adds right-click items; low risk.
• scripting high Can inject JS into pages; without broad host_permissions scope is limited but capability is significant.
• alarms low Scheduling; core to refresh function, low risk.
• webRequest high Observe network requests across tabs; high capability even read-only.
• cookies high Read/write cookies; paired with tabs elevates risk of session data access.
• offscreen low Offscreen document for background tasks; low standalone risk.
• power low Prevent sleep; expected for page-monitor use case.

Pillar Scores

Bookkeeping