Top Risks

• Sends enterprise SAP BTP/CPI page content to OpenAI/Anthropic/Gemini/Groq APIs — AI exfiltration surface.
• Six innerHTML sinks rendering AI-generated output create stored DOM-XSS risk despite strict CSP.
• Unverifiable solo developer (Gmail, no verified publisher) with access to enterprise SAP consoles.
• install_url_hijack flag set (target unknown).
• new Function() in bundled jszip.min.js.

Evidence

• ai_exfil_surface crx host_permissions include api.openai.com, api.anthropic.com, generativelanguage.googleapis.com, api.groq.com alongside SAP BTP domains.
• dom_xss_sinks crx 6 dom_sink_innerhtml_userctrl findings; js/12-ask.js renders AI response via innerHTML (esc() applied in snippet).
• function_constructor crx new Function() in lib/jszip.min.js; CSP script-src 'self' blocks remote eval but not this sink.
• developer_identity store Gmail dev contactmayankkhanna@gmail.com; not verified, not featured; privacy site integrationnest.com separate.
• csp_strict crx MV3 with script-src 'self'; object-src 'self' — no remote script loading allowed.
• install_url_hijack_flag crx install_url_hijack=true but target null; no uninstall hijack.
• privacy_scoped api Policy fetched, extension-scoped, declares no data collection; mentions third-party sharing (consistent with AI APIs).
• clean_threat_intel api No bad hosts, monetization, affiliate hits; 0 sibling extensions; 0 review red flags; no CVEs.

Permissions Breakdown

• storage low Local settings storage only.
• activeTab low Access only on explicit user invocation.
• scripting medium Can inject code into permitted SAP/BTP pages.
• tabs medium Can enumerate and manipulate browser tabs.
• identity low OAuth identity, no sensitive scopes declared.
• host_permissions (SAP/AI providers) medium Scoped to SAP BTP domains and AI APIs; matches stated SAP CPI AI-assistant function.

Pillar Scores

Bookkeeping