Top Risks

• Broad *://*/* host + scripting + cookies enables full page read/write and cookie access across all sites for 6M users.
• eval() in extension-loader.js and new Function() in toolboxjs/sw files present code-execution risk if any input is attacker-controlled.
• Dynamic script element creation in toolboxjs.js can load arbitrary JS at runtime, bypassing static analysis.
• Privacy policy fetched but scope_extension=false and data_collection=false — policy does not cover extension-specific data handling.
• uninstall_url_hijack=true: extension sets an uninstall redirect URL (target not captured), may exfiltrate identity on removal.

Evidence

• broad_host_permission manifest *://*/* host_permission combined with scripting and cookies enables all-site data access for 6M installs.
• eval_user_input crx extension-loader.js: o.eval(u) — direct eval of variable, potential arbitrary code execution.
• script_src_dynamic crx toolboxjs.js: document.createElement('script') with dynamic src — runtime script loading.
• uninstall_url_hijack store uninstall_url_hijack=true; target unknown — may phone home or redirect on removal.
• privacy_policy_scope_missing api Policy fetched (212KB) but scope_extension=false; does not specify what this extension collects.
• ai_content_processing store AI writing assistant injects into all pages and processes user text; high data-exfil surface.
• featured_by_google store is_featured_by_google=true; partially offsets reputation risk.
• no_cve_findings crx cve_findings_raw is empty; no known-vulnerable bundled libraries detected.

Permissions Breakdown

• alarms low Schedules background tasks; minimal data exposure.
• cookies high Can read/write cookies across origins; paired with *://*/* amplifies risk.
• storage low Local extension data storage; low direct risk.
• activeTab medium Access to current tab on user gesture; moderate scope.
• contextMenus low Adds right-click menu items; no data access on its own.
• notifications low Shows notifications; limited data risk without host access pairing.
• scripting high Programmatic script injection into pages; high capability paired with *://*/* host.
• sidePanel low Opens side panel UI; low direct risk.
• *://*/* high Broad host permission covering all URLs; maximum reach for content injection.
• https://quillbot.com/ low Scoped to own domain; expected for AI service communication.

Pillar Scores

Bookkeeping