Top Risks

• THREAT FEED: extension ID independently confirmed malicious by TPCI chrome-mal-ids — DeepSeek AI Chat + malext.io malicious_extension_sentry (+2.5, capped).
• Brand impersonation: claims DeepSeek affiliation but developer domain is ai-chat-bot.pro with no confirmed ownership.
• Privacy policy is Google's generic policy — scope_extension=false, data_collection=true, third_party_sharing=true; triggers +10.0 privacy per v3.5 rule D.
• Install URL hijack opens ai-chat-bot.pro/welcome on install; uninstall URL hijack also set — monetization shell indicators.
• No developer name listed; generic AI-chat domain with no verified publisher or featured badge.

Evidence

• brand_impersonation store brand_mention.is_impersonation=true for 'deepseek'; developer domain ai-chat-bot.pro is not confirmed owner.
• install_url_hijack crx onInstalled opens https://ai-chat-bot.pro/welcome; uninstall_url_hijack=true. Monetization shell pattern.
• generic_privacy_policy store Policy URL is Google's own policy; scope_extension=false, data_collection=true, third_party_sharing=true. Triggers +10.0.
• no_developer_name store developer_name is empty string; no verified publisher; no featured badge.
• stale_extension store months_since_update=18; maintenance pillar +6.0 (12-24 month band).
• external_js_host crx js_external_hosts=['ai-chat-bot.pro']; no CSP; MV3 so no +2.0 MV2 penalty but external host present.
• no_csp crx content_security_policy=null; csp_present=false on MV3 extension with external JS host.
• ai_extension_page_content store AI/Gen-AI category extension; Webstore +2.5 for AI extension processing page content.
• threat_feed_membership api Extension ID listed by TPCI chrome-mal-ids — DeepSeek AI Chat + malext.io malicious_extension_sentry; score 4.32 -> 6.82 (+2.5 cap 2.5).

Permissions Breakdown

• storage low Local key-value storage only; no cross-origin data access.

Pillar Scores

Bookkeeping