Top Risks

• Privacy policy URL could not be fetched (fetch_error:HTTPError); policy content unverifiable.
• Developer email is free-webmail (gmail) with no developer name listed; identity unverifiable.
• Install URL hijack opens browsernative.com on install — minor tracking/redirect risk.
• Description promises recording capability but lacks tabCapture/desktopCapture permissions — mismatch.
• No CSP declared (MV3 mitigates somewhat, but adds minor concern given unverifiable privacy policy).

Evidence

• privacy_policy_fetch_failed api Privacy policy at browsernative.com/extensions-privacy-policy/ returned HTTPError; content unverifiable → +10.0 privacy pillar.
• free_webmail_dev_no_name store developer_email=browsernative.apps@gmail.com, developer_name empty; free-webmail identity → reputation penalty.
• verified_publisher_featured store verified_publisher=true AND is_featured_by_google=true; discounts applied to reputation pillar.
• install_url_hijack crx onInstalled opens https://browsernative.com/screenshot-extension/ — Webstore +2.0 applied.
• description_promise_mismatch store Promises recording but lacks tabCapture/desktopCapture → description_promise.mismatches non-empty → +2.0 webstore.
• no_csp manifest content_security_policy is null; MV3 default strict policy partially mitigates but no explicit CSP declared.
• permissions_low_risk manifest Only activeTab, downloads, storage declared; no host_permissions, no broad access. Category discount applies.
• no_bad_hosts_no_cves crx bad_host_hits=[], affiliate_hits=[], cve_findings_raw=[], code_findings_raw=[], obfuscation_score=0.0.

Permissions Breakdown

• activeTab low Captures current tab only on user action; appropriate for screenshot tool.
• downloads medium Can write files to user's disk; expected for screenshot save functionality.
• storage low Local preference storage; low risk.

Pillar Scores

Bookkeeping