Top Risks

• Brand impersonation: uses 'Discord' name without being Discord Inc; verified publisher flag doesn't negate impersonation.
• Privacy policy is Google's generic account policy — not scoped to this extension; admits data collection and third-party sharing.
• Discord chat content injected via content_script sent to multiple AI APIs including Chinese-hosted services (DeepSeek, Moonshot, QQ Transmart).
• No developer name disclosed; anonymous publisher behind codecode.me domain reduces accountability.
• 12 distinct external JS hosts including cdn.discordapp.com and creem.codecode.me (payment/billing?) beyond translation APIs.

Evidence

• brand_impersonation store brand_mention.is_impersonation=true; brands_mentioned=[discord]; confirmed_owner=false.
• privacy_policy_generic store Policy URL is Google account policy; scope_extension=false, data_collection=true, third_party_sharing=true → +10.0 privacy (v3.5 D).
• content_script_discord_with_ai_apis manifest Content script on discord.com/* routes chat text to 9 translation/AI endpoints including api.deepseek.com, api.moonshot.cn, transmart.qq.com.
• no_developer_name store developer_name is empty string; +1.0 reputation for missing Offered-by.
• verified_publisher_featured store verified_publisher=true, is_featured_by_google=true; discounts applied but capped by impersonation signal.
• no_csp manifest content_security_policy=null on MV3; MV3 has strict default so no +2.0 MV2 penalty, but increases risk surface.
• external_hosts_count crx 12 distinct JS external hosts: deepl, googleapis, openai, x.ai, deepseek, moonshot, qq, discord, codecode.me, apache.org, twemoji.
• no_cve_findings crx cve_findings_raw=[] and code_findings_raw=[]; obfuscation_score=0.0. Clean scan.

Permissions Breakdown

• storage low Stores user settings/preferences locally; low risk.
• activeTab low Grants access to current tab on user action only; scoped.
• host: https://*.deepl.com/* medium Sends text to DeepL translation API; expected for TranslationTool.
• host: https://*.googleapis.com/* medium Access to broad Google APIs; plausible for translation but wide scope.
• host: https://*.google.com/* medium Very broad Google domain access beyond just translate endpoint.
• host: https://*.microsofttranslator.com/* medium Microsoft Translator API; expected for TranslationTool.
• host: https://transmart.qq.com/* medium Tencent translation endpoint; data routed to Chinese infra.
• host: https://api.openai.com/* medium Sends Discord text to OpenAI; privacy risk for conversation data.
• host: https://api.x.ai/* medium Sends Discord text to xAI Grok; privacy risk.
• host: https://api.deepseek.com/* medium Sends text to DeepSeek (Chinese-hosted AI); data sovereignty concern.
• host: https://api.moonshot.cn/* medium Sends text to Moonshot AI (Chinese infra); data sovereignty concern.
• content_script: https://discord.com/* medium Injects into all Discord pages; reads full chat content.

Pillar Scores

Bookkeeping