Top Risks

• Search-provider override silently redirects all omnibox queries to myperfecttab.com (outlook.com dev email, unverified domain).
• 23 months since last update — nearing zombie threshold; no changelog visible.
• Developer email is free webmail (outlook.com); no verified business identity; developer name absent.
• Privacy policy discloses third-party sharing but extension function (query interception) is high-sensitivity.
• 100K installs gives broad reach for any future supply-chain compromise or ownership transfer.

Evidence

• search_provider_override manifest chrome_settings_overrides sets default search to https://myperfecttab.com/search/?q={searchTerms}; is_default=true.
• developer_identity store Developer email myperfecttab@outlook.com (free webmail); developer_name empty; no verified business domain.
• maintenance_staleness store Last updated Sep 2024; months_since_update=23, approaching 24-month high-risk band.
• privacy_policy_classification api Policy fetched; scope_extension=true, data_collection=true, retention=true, third_party_sharing=true; pillar=+1.0.
• verified_publisher store verified_publisher=true; grants -3.0 reputation discount but caps apply due to free-webmail dev identity.
• no_cve_no_bad_hosts api cve_findings_raw=[], bad_host_hits=[], monetization_hits=[], affiliate_hits=[] — no threat-intel hits.
• no_js_files crx js_file_count=0, code_findings_raw=[], obfuscation_score=0.0 — extension is manifest-only.
• install_reach store 100K installs; high blast radius if search provider is monetized or extension ownership changes.

Permissions Breakdown

• chrome_settings_overrides.search_provider medium Overrides default search engine; routes all omnibox queries through myperfecttab.com.

Pillar Scores

Bookkeeping