Top Risks

• scripting + *://*/*: can inject code into every page the user visits, full page content access.
• Uninstall URL hijack redirects to lunabot.ai/r/ext-leave — tracks churn via 3rd-party redirect.
• No developer name listed; AI extension with broad host access lacks accountability anchor.
• innerHTML sinks in contentScript and panel bundles without CSP — DOM-XSS risk on injected UI.
• AI extension processes page content across all URLs; data sent to lunabot.ai backend.

Evidence

• broad_host_scripting manifest host_permissions *://*/* + scripting permission allows JS injection on every site.
• uninstall_url_hijack crx chrome.runtime.setUninstallURL set to https://lunabot.ai/r/ext-leave (3rd-party redirect).
• no_csp manifest content_security_policy is null; MV3 default applies but no explicit hardening declared.
• dom_xss_sink crx innerHTML writes in contentScript.bundle.js and panel.bundle.js without CSP guard.
• ai_page_content store AI assistant runs on all pages; page content routed to lunabot.ai backend.
• verified_publisher store Developer is verified publisher; lunabot.ai resolves and is not throwaway.
• privacy_policy_adequate api Policy scoped to extension, discloses data collection, retention, and 3rd-party sharing.
• no_developer_name store developer_name field is empty string; reduces accountability signal.

Permissions Breakdown

• contextMenus low Adds right-click menu items; low capability on its own.
• storage low Local data persistence; standard for AI assistant extensions.
• tabs medium Can read tab URLs and titles; moderate privacy surface.
• scripting high Programmatic script injection into pages; high capability when paired with *://*/*.
• *://*/* high Broad host access covering all URLs; amplifies scripting and tab permissions.

Pillar Scores

Bookkeeping