Top Risks

• content_scripts on <all_urls> with no CSP: extension can read/modify every page the user visits.
• Multiple new Function() constructors + innerHTML sinks with no CSP raises DOM-XSS/code-injection risk.
• Privacy policy hosted on free GitHub Pages, not on developer's own domain; third_party_silence flagged.
• AI extension processes page content across all sites; 12 external JS host references in bundled code.
• No verified publisher badge; developer domain mismatch between deepseek.ai and github.io policy host.

Evidence

• content_scripts:<all_urls> manifest Extension injects into every URL; combined with no CSP this is the primary risk surface.
• no CSP (csp_present=false, MV3) crx MV3 but content_security_policy is null; no script-src restriction on bundled code.
• function_constructor x4 + innerHTML x2 crx 4 new Function() usages and 2 innerHTML sinks detected; no CSP amplifies DOM-XSS risk.
• privacy policy on free hosting store Policy URL is github.io subdomain, not deepseek.ai; third_party_silence==true.
• AI extension + page content access store Sidebar processes content from all visited pages via <all_urls> content script.
• 12 external JS host references crx js_external_hosts includes cdn., github.com, hertzen.com, feross.org and 8 others.
• host_geo_diversity: 4 countries (CA, IN, NL, US) crx +1.5 network penalty; AI extension category not exempt from geo-diversity rule.
• verified_publisher=false, not featured store No verification badge; reputation starts at 5.0 with no downward discount available.

Permissions Breakdown

• unlimitedStorage low Allows unlimited local storage; low direct risk but enables large local data accumulation.
• storage low Standard key-value storage for extension state.
• system.display low Read display config; minimal risk.
• tabs medium Access tab URLs and titles across all open tabs; moderate data exposure.
• notifications low Send desktop notifications; low risk in isolation.
• content_scripts:<all_urls> high Injects scripts into every page the user visits; broad capability for page content access.
• content_scripts:https://chat.deepseek.com/* medium Targeted injection into DeepSeek chat; expected for stated function.

Pillar Scores

Bookkeeping