Top Risks

• Privacy policy is Google's own account policy — not scoped to this extension; admits data collection and 3rd-party sharing (Privacy +10.0).
• Brand impersonation: 'zoom' mentioned in name/brand_mention with confirmed_owner=false and gmail dev address (Reputation +2.0).
• Free-webmail developer (gmail) with no verified business website raises accountability concern (Reputation floor).
• Install-URL and uninstall-URL hijack flags present; install_url_target and uninstall_url_target are null but flags are set.
• Content script declared for <all_urls> with no CSP; broad reach despite simple stated purpose.

Evidence

• privacy_policy_generic store Policy URL is Google account policy; scope_extension=false, data_collection=true, third_party_sharing=true → Privacy pillar +10.0 per v3.5 rule D.
• brand_impersonation store brand_mention.is_impersonation=true, brands=['zoom'], confirmed_owner=false, not verified/featured → Reputation +2.0.
• free_webmail_dev manifest Developer email grephyr.prj@gmail.com; no business domain; Reputation floor ≥7.5 with free-webmail+no biz site.
• install_uninstall_url_hijack crx install_url_hijack=true and uninstall_url_hijack=true; targets null but flags set → Webstore +2.0 (uninstall hijack) +2.0 (install hijack).
• content_scripts_all_urls manifest content_scripts_matches=[<all_urls>] with only storage+activeTab declared; broad reach for a zoom utility.
• is_featured_by_google store Extension carries Google Featured badge; partial trust signal, does not override privacy/reputation concerns.
• no_cve_no_bad_hosts crx cve_findings_raw=[], bad_host_hits=[], affiliate_hits=[], monetization_hits=[] — no threat-intel hits detected.
• operator_cluster_dev_email api sibling_count=0 by compound fingerprint; dev_email dimension shows 4 siblings — low compound cluster risk.

Permissions Breakdown

• storage low Stores per-site zoom preferences locally; expected for this extension type.
• activeTab low Accesses current tab on user action only; limited scope.
• content_scripts <all_urls> medium Content script runs on every site; broad reach but paired with only low-risk permissions.

Pillar Scores

Bookkeeping