Top Risks

• Numbered gmail alias (f42784627@gmail.com) — high-risk dev identity pattern for a search-override extension.
• Default search engine hijack via chrome_settings_overrides — redirects all searches through videosearcherpro.com.
• Uninstall URL hijack set — extension registers a 3rd-party uninstall redirect (+3.0 webstore signal).
• No developer name disclosed — reduces accountability for a search-monetization product.
• Verified publisher badge claims but developer is free-webmail with no recognizable org behind it.

Evidence

• numbered_gmail_alias store Developer email f42784627@gmail.com is a numbered free-webmail alias — Webstore +3.0 per rubric.
• search_provider_override manifest chrome_settings_overrides sets is_default=true, routing all searches to videosearcherpro.com.
• uninstall_url_hijack crx uninstall_url_hijack=true — extension registers an uninstall URL, Webstore +3.0.
• verified_publisher_with_free_webmail store Verified publisher badge present but contact is a numbered gmail; no org name; discount capped.
• privacy_policy_adequate api Policy fetched; scope_extension=true, data_collection=true, retention=true, third_party=true — fully scored.
• no_cve_no_code_findings crx cve_findings_raw empty, code_findings_raw empty, obfuscation_score=0.0 — code quality pillar clean.
• months_since_update_8 store 8 months since last update → maintenance +3.5 (6-12 month band).
• no_operator_siblings api operator_cluster.sibling_count=0 — no cluster amplification applied.

Permissions Breakdown

• chrome_settings_overrides.search_provider (is_default=true) medium Overrides default search engine — medium-impact capability, monetization vector.
• host_permissions: https://videosearcherpro.com/* low Narrow host permission scoped to own domain only.

Pillar Scores

Bookkeeping