Top Risks

• cookies + LinkedIn host access: extension can read LinkedIn session cookies and exfiltrate account data.
• No CSP + 4x innerHTML sinks across content/popup scripts — DOM-XSS vector on LinkedIn pages.
• Uninstall URL hijack registered (uninstall_url_hijack=true) — behavioral red flag for traffic monetization.
• Developer email is free-webmail (hotmail.com); no developer name listed; dev domain not verified.
• Plaintext HTTP host permissions for Heroku and connectgenie.ai backends — data in transit unencrypted.

Evidence

• cookies + LinkedIn host access manifest cookies permission + *://*.linkedin.com/* enables full session cookie read on LinkedIn — high exfil risk.
• no CSP + innerHTML sinks crx csp_present=false; 4 files contain dom_sink_innerhtml_userctrl — DOM-XSS escalated per FIX B.
• uninstall_url_hijack crx chrome.runtime.setUninstallURL() invoked — monetization shell indicator per rubric (+3.0 Webstore).
• free-webmail developer email, no dev name store bilalasif435@hotmail.com; developer_name empty; domain_age_ct not queried due to free-webmail.
• plaintext HTTP host permissions manifest http://connect-genie.herokuapp.com/* and http://app.connectgenie.ai/* allow unencrypted comms.
• AI extension processing LinkedIn page content store Content scripts injected into linkedin.com; AI category; page content sent to OpenAI and dev backend.
• verified_publisher=true but free-webmail email store Verified publisher discount limited — email is hotmail.com, not dev domain; partial trust signal.
• react@17.0.2 bundled, no CVEs found crx cve_findings_raw empty; react 17.0.2 has no flagged CVEs in scan — CVE pillar 0.0.

Permissions Breakdown

• tabs medium Can read tab URLs and metadata across all open tabs.
• storage low Local data persistence; low standalone risk.
• identity low OAuth token access; scoped to signed-in Google account.
• cookies high Can read/write cookies; combined with LinkedIn host access raises session-theft risk.
• notifications low Display-only; limited abuse surface.
• *://*.linkedin.com/* high Full cookie + script access to LinkedIn; could exfiltrate session tokens and profile data.
• https://*.openai.com/ medium Outbound to OpenAI API; plausible for AI assistant but sends user content externally.
• https://connect-genie.herokuapp.com/* medium Developer backend on shared Heroku infra; data transits third-party hosting.
• http://connect-genie.herokuapp.com/* high Plaintext HTTP endpoint — data in transit unencrypted.
• https://app.connectgenie.ai/* low Developer-owned HTTPS domain; expected backend.
• http://app.connectgenie.ai/* medium Plaintext HTTP fallback to dev domain — unnecessary insecure channel.

Pillar Scores

Bookkeeping