Top Risks

• Brand impersonation: dev 'OpenAIToken' (gmail) impersonates OpenAI/ChatGPT with no ownership; phishing/credential harvesting risk.
• Content script on chatgpt.com via unverified dev can intercept ChatGPT session tokens and exfiltrate to api.openaitoken.org.
• Extension contacts 5 external hosts including BSC blockchain nodes, OKX web3, bscscan — unrelated to stated 'token rewards' but crypto-drainer shape.
• Free-webmail dev (gmail) with no verified business; zero installs and no ratings — extremely high unverifiable-intent risk.
• DOM-XSS sink (innerHTML user-controlled) in content.js with no CSP; exploitable if api.openaitoken.org is compromised or malicious.

Evidence

• brand_impersonation store Developer named 'OpenAIToken' with gmail email; brand_mention.is_impersonation=true, confirmed_owner=false.
• free_webmail_dev store Developer email sirenbsc@gmail.com; no verified business domain; reputation floor applies.
• crypto_exfil_shape manifest JS contacts bsc-dataseed1.binance.org, bscscan.com, web3.okx.com — BSC blockchain nodes; crypto-drainer pattern.
• chatgpt_host_perm_with_unverified_dev manifest Content script injected into chatgpt.com by unverified gmail dev; api.openaitoken.org is exfil target.
• dom_xss_sink crx dom_sink_innerhtml_userctrl in content.js; no CSP present (csp_present=false) amplifies risk.
• no_csp manifest content_security_policy is null; MV3 default applies but no explicit hardening.
• micro_install_count store Only 5 installs, 0 ratings; extremely low footprint for a crypto-reward extension — newly deployed or test phase.
• privacy_policy_adequate api Policy fetched; scope_extension=true, data_collection=true, retention=true, third_party_sharing=true — all fields present.

Permissions Breakdown

• storage low Local data persistence; low standalone risk.
• scripting medium Can inject scripts into matched hosts (chatgpt.com); medium risk when combined with host perms.
• https://chatgpt.com/* high Runs content scripts on ChatGPT; can read/modify session, tokens, and page content.
• https://api.openaitoken.org/* high Backend controlled by unverified dev; exfil target for harvested ChatGPT session data.

Pillar Scores

Bookkeeping