Top Risks

• Privacy policy admits data collection + 3rd-party sharing but is NOT scoped to this extension → Privacy pillar 10.0.
• Brand impersonation: extension name invokes 'ChatGPT' and 'WhatsApp' without confirmed ownership.
• new Function() constructor in exportWorker.js enables dynamic code execution risk.
• Uninstall URL hijack detected; combined with 12 distinct external JS hosts including github.com raw content.
• Content script on web.whatsapp.com with innerHTML sinks risks DOM-XSS against WhatsApp messages.

Evidence

• brand_impersonation store brand_mention.is_impersonation=true; brands 'chatgpt' and 'whatsapp' in title; confirmed_owner=false.
• privacy_policy_non_scoped_with_data_sharing api Policy fetched; scope_extension=false, data_collection=true, third_party_sharing=true → +10.0 privacy.
• uninstall_url_hijack crx uninstall_url_hijack=true; redirects user on uninstall — monetization/tracking signal.
• function_constructor crx new Function() in exportWorker.js; allows dynamic code execution from string input.
• dom_sink_innerhtml crx Two innerHTML-from-variable sinks in React bundle and messagePollingService running on whatsapp.com.
• 12_external_js_hosts crx js_external_hosts includes raw.github.com, github.com, payments.kaptionai.com, stuartk.com, web.dev.
• verified_publisher_featured store verified_publisher=true, is_featured_by_google=true; partially mitigates reputation concern.
• developer_name_missing store developer_name is empty string; no 'Offered by' display name increases attribution ambiguity.

Permissions Breakdown

• storage low Standard local data persistence; low risk.
• offscreen low Used for off-screen audio processing; low risk in context.
• unlimitedStorage low Allows large local storage; minor abuse potential.
• https://huggingface.co/* medium Host permission to HuggingFace model CDN; needed for on-device model download.
• https://cdn-lfs.huggingface.co/* medium LFS CDN for model weights; expected for AI audio extension.
• https://cas-bridge.xethub.hf.co/* medium HuggingFace content-addressable store bridge; needed for model fetch.

Pillar Scores

Bookkeeping