Top Risks

• Generic Google privacy policy not scoped to extension data practices
• Extension unmaintained for 26 months (August 2024)
• No content security policy defined
• Native messaging capability present (mitigated: recognized publisher)

Evidence

• recognized_publisher store Google-owned service (remotedesktop.google.com), featured by Google
• maintenance_gap store Last updated August 2024, 26 months ago
• privacy_policy_generic api Links to generic Google account privacy policy, not extension-scoped
• native_messaging_present manifest Uses nativeMessaging for remote control, publisher_recognized=true
• no_csp manifest content_security_policy is null

Permissions Breakdown

• nativeMessaging high Required for remote desktop control; publisher is recognized Google service
• downloads medium File transfer capability for remote sessions

Pillar Scores

Bookkeeping