Top Risks

• MANAGEMENT PERMISSION: extension can enumerate and disable other installed extensions (incl. security and privacy tools).
• management permission lets extension enumerate/disable other installed extensions — high privilege abuse vector.
• scripting + host permission on chat.openai.com allows JS injection into ChatGPT sessions, exposing user conversations.
• Install URL hijack: onInstalled opens third-party netlify.app page; uninstall URL hijack also present.
• Privacy policy is Google's own generic policy (scope_extension=false, admits 3rd-party sharing) — counts as +10 under v3.5 rule D.

Evidence

• management_permission manifest management declared — can enumerate/disable all other installed extensions.
• scripting_plus_openai_host manifest scripting + host_permission https://chat.openai.com/* allows JS injection into ChatGPT.
• install_url_hijack crx onInstalled redirects to https://extension-oninstall.netlify.app/ (third-party netlify).
• uninstall_url_hijack crx Uninstall URL hijack flagged; target null but mechanism present.
• privacy_policy_generic store Policy is Google's account policy: scope_extension=false, data_collection=true, third_party_sharing=true.
• free_webmail_dev store Developer email aliafzalextra@gmail.com; no verified publisher badge; gmail domain.
• external_hosts_count crx 12 external JS hosts including Firebase RTDB, netlify, WhatsApp API, flaticon, wikimedia.
• declarativeNetRequestWithHostAccess_no_csp manifest declarativeNetRequestWithHostAccess declared; csp_present=false on MV3 extension.

Permissions Breakdown

• activeTab low Scoped to user-initiated tab interaction only.
• contextMenus low Adds right-click menu items; low standalone risk.
• declarativeNetRequestWithHostAccess high Can intercept/block/redirect network requests with host access — HIGH capability.
• scripting high Can inject arbitrary JS into matched pages; combined with host_permissions is critical.
• commands low Keyboard shortcut binding; low risk.
• management high Can enumerate, enable/disable other installed extensions — very high privilege.
• storage low Local key-value storage; minimal risk alone.
• webNavigation medium Observes navigation events across tabs; can track browsing patterns.
• windows medium Can create/manipulate browser windows; moderate risk.
• system.display low Read display info; low risk.
• *://*.vu.edu.pk/* medium Scoped host permission to VU domain; expected for stated function.
• *://vu-db-worker.gptquiz.workers.dev/* medium Third-party Cloudflare Workers endpoint; not dev-controlled domain.
• https://chat.openai.com/* high Host permission on ChatGPT — can read/inject into OpenAI sessions.

Pillar Scores

Bookkeeping