Top Risks

• Brand impersonation: extension uses 'Gemini' branding but confirmed_owner==false and not a verified Google product.
• Privacy policy is Google's generic account policy (scope_extension==false, data_collection==true, third_party_sharing==true) — scores maximum privacy risk.
• Developer domain pop01.odn.ne.jp does not resolve; no accountable business identity behind the extension.
• No CSP declared (MV3 default helps but extension contacts jsDelivr CDN and github.com — remote code delivery surface).
• AI extension sending page content to generativelanguage.googleapis.com without scoped privacy disclosure.

Evidence

• brand_impersonation store brand_mention.is_impersonation==true for 'gemini'; confirmed_owner==false; not verified Google publisher.
• privacy_policy_generic store Policy is Google account policy: scope_extension=false, data_collection=true, third_party_sharing=true — triggers +10.0 privacy (v3.5 D).
• developer_domain_unresolvable api threat_intel.developer_domain_info.resolves==false for pop01.odn.ne.jp; no accountable identity.
• external_hosts_cdn crx js_external_hosts includes www.jsdelivr.com and github.com — third-party CDN/code-hosting reachable at runtime.
• no_csp manifest content_security_policy==null; MV3 mitigates eval but remote fetch surface from jsDelivr/github remains.
• ai_page_content crx Extension contacts generativelanguage.googleapis.com (Gemini API); page content likely transmitted; no scoped privacy disclosure.
• verified_publisher store verified_publisher==true but domain does not resolve — v3.5 invariant 0c caps discount to -1.0.
• network_diversity_low api host_geo_diversity.country_count==1 (IN); 4 distinct external domains (googleapis, github, jsdelivr, youtube) → +1.5 network.

Permissions Breakdown

• activeTab low Only accesses current tab on user gesture; limited scope.
• contextMenus low Adds right-click menu items; no data access by itself.
• scripting medium Can inject scripts into active tab; combined with activeTab scope.
• storage low Local extension storage only; no cross-origin data exposure.

Pillar Scores

Bookkeeping