Top Risks

• Broad host permissions (http://*/, https://*/) paired with scripting enable page content access on all sites.
• Privacy policy is Google's generic corporate policy; not scoped to this extension's data practices.
• Generic privacy policy admits data collection and third-party sharing without extension-specific scope.
• Developer name field is empty in listing despite Google ownership; minor governance gap.
• file://*/* host permission extends access to local filesystem content.

Evidence

• broad_host_permissions manifest host_permissions include http://*/ and https://*/ granting content access on all websites.
• recognized_organization store Developer email keep-extension-support@google.com; google.com resolves, not throwaway, confirmed owner.
• featured_by_google store is_featured_by_google == true; extension follows recommended practices per store badge.
• privacy_policy_generic api policies.google.com/privacy: fetched, scope_extension=false, data_collection=true, third_party_sharing=true. D rule applies → +10.
• no_code_findings crx code_findings_raw empty; obfuscation_score 0.0; no exfil or eval indicators detected.
• no_cve_findings crx cve_findings_raw empty; no vulnerable bundled libraries detected.
• clean_threat_intel api bad_host_hits, affiliate_hits, monetization_hits all empty; no operator siblings.
• mv3_strict_csp manifest MV3 with script-src 'self'; no unsafe-eval/inline; no MV2 CSP penalty applies.

Permissions Breakdown

• activeTab low Scoped to current tab on user action only; limited blast radius.
• identity medium OAuth token access; needed to authenticate Google account for Keep.
• identity.email medium Reads user email address via identity API; scoped to Google sign-in.
• contextMenus low Adds right-click menu items; low standalone risk.
• tabs medium Can read tab URLs/titles; justified for saving page content to Keep.
• unlimitedStorage low Allows large local storage; no data exfil risk on its own.
• scripting medium Can inject scripts into pages; broad when paired with host_permissions.
• file://*/* medium Host permission covering local files; unusual for a notes tool.
• http://*/ high Broad HTTP host access enabling content injection on all HTTP sites.
• https://*/ high Broad HTTPS host access enabling content injection on all HTTPS sites.

Pillar Scores

Bookkeeping