AI Chat for Search
jgjaeacdkonaoafenlfkkkmbaopkbilf
Risk Score
4.10
Risk Level:
Medium
Recommendation:
🟡 MEDIUM RISK — review
Top Risks
- Privacy policy fetched but length=20 chars, scope_extension=false, data_collection=false — effectively non-disclosure (score +9.0).
- Uninstall URL hijack present — onUninstall redirects to a third-party URL (+3.0 webstore).
- No CSP + 7 files with innerHTML user-controlled DOM sinks across all scripts, amplifying XSS risk.
- 2M-user AI extension injects content scripts on virtually every major search engine globally — high-reach data exposure potential.
- Unverified developer, no featured-publisher badge, AI category processing search-page content.
Evidence
- uninstall_url_hijack crx uninstall_url_hijack=true — extension registers 3rd-party uninstall redirect (+3.0 webstore).
- privacy_policy_too_short api Policy fetched, length=20 chars, scope_extension=false, data_collection=false → effectively non-disclosure (+9.0 privacy).
- no_csp crx content_security_policy=null; MV3 has strict default but no explicit CSP hardens XSS sinks.
- dom_xss_sinks_widespread crx 7 of 8 JS files contain innerHTML user-controlled sinks; no CSP present — DOM-XSS risk elevated (+2.0 code).
- ai_extension_high_reach store AI category, 2M installs, content scripts on 200+ search domains — high data-access blast radius (+2.5 webstore).
- is_featured_by_google store Extension carries Google Featured badge — partial reputation credit (-2.0 reputation).
- no_verified_publisher store verified_publisher=false; developer identity limited to aichat4search.com domain.
- third_party_silence api Privacy policy does not mention third-party sharing (+1.0 privacy, but already near cap).
Permissions Breakdown
- storage low Stores local extension data; low risk.
- scripting medium Allows programmatic script injection into pages; elevated capability.
- unlimitedStorage low Removes storage quota cap; minor risk.
- sidePanel low UI panel only; no data-access capability.
- host_permissions: https://*.openai.com/ medium Can read/write to all OpenAI subdomains; matches stated AI chat function.
- content_scripts on 200+ search engine TLDs medium Broad search-page reach; consistent with AI-on-search use case but high REACH.
Pillar Scores
Permissions2.30
Reputation4.50
Network1.50
Webstore6.50
Maintenance1.50
Privacy9.00
Code Quality2.00
CVE Exposure0.00
Scoring History
| fsssiedxa$"sssiedx | 4.91 | Medium | review | 2026-08-19 |
| xx pfsssiedxa$"sssiedx | 4.65 | Medium | review | 2026-08-14 |
| 'fsssiedxa'sssiedx | 4.56 | Medium | review | 2026-08-14 |
| "fsssiedxafdsaxax><!--></ScRiPt>asddsssiedx | 4.14 | Medium | review | 2026-08-14 |
| fsssiedxa<sssiedx | 4.24 | Medium | review | 2026-08-14 |
| v3.6"><script>eHgA(9853)</script> | 4.31 | Medium | review | 2026-08-05 |
| <th:t="${dfb}#foreach | 4.89 | Medium | block | 2026-08-05 |
| v3.6&n929259=v979823 | 4.48 | Medium | review | 2026-08-05 |
| <fsssiedx{$"sssiedx | 4.61 | Medium | review | 2026-08-04 |
| xx pfsssiedxi$"sssiedx | 4.91 | Medium | review | 2026-08-04 |
| %27fsssiedxifdsaxax><!--></ScRiPt>asddsssiedx | 4.36 | Medium | review | 2026-08-04 |
| 5.29 | Medium | review | 2026-08-04 | |
| <fsssiedxi | 5.02 | Medium | review | 2026-08-04 |
| fsssiedxi<sssiedx | 4.89 | Medium | review | 2026-08-04 |
| <fsssiedxf$"sssiedx | 5.05 | Medium | review | 2026-08-04 |
| <fsssiedxa | 5.16 | Medium | review | 2026-08-04 |
| <fsssiedxifdsaxax><!--></ScRiPt>asddsssiedx | 3.98 | Low | review | 2026-08-04 |
| <fsssiedxi'sssiedx | 5.05 | Medium | review | 2026-08-04 |
| fsssiedx<sssiedx | 4.55 | Medium | review | 2026-08-04 |
| %76%33%2E%36%39%30%32%36%22%28%29%3B%7D%5D%39%34%35%38 | 4.41 | Medium | review | 2026-07-29 |
| %76%33%2E%36%22%6F%6E%6D%6F%75%73%65%6F%76%65%72%3D%4E%43%64%4A%28%39%39%31%35%34%29%22 | 4.35 | Medium | review | 2026-07-29 |
| <%={{={@{#{${dfb}}%> | 5.18 | Medium | review | 2026-07-29 |
| 1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%> | 4.35 | Medium | review | 2026-07-29 |
| bfgx10541%C0%BEz1%C0%BCz2a%90bcxhjl10541 | 5.03 | Medium | review | 2026-07-29 |
| v3.6'"()&%<zzz><ScRiPt >NCdJ(9114)</ScRiPt> | 4.68 | Medium | block | 2026-07-29 |
| v3.6&n958248=v927729 | 4.31 | Medium | review | 2026-07-29 |
| fsssiedxafdsaxax><!--></ScRiPt>asddsssiedx | 4.21 | Medium | review | 2026-07-28 |
| fsssiedxa'sssiedx | 4.07 | Medium | review | 2026-07-28 |
| sssieddrubricxsx | 4.64 | Medium | review | 2026-07-28 |
| v3.6 | 4.10 | Medium | review | 2026-06-16 |
| v3.4-rev | 2.95 | Low | review | 2026-06-15 |
Bookkeeping
Rubric v3.6
Scored at 2026-06-16 07:45
Listing SHA
db2264980942…
Force block
— not fired
Score recovered
no
Elapsed
27.4s