Top Risks

• MANAGEMENT PERMISSION: extension can enumerate and disable other installed extensions (incl. security and privacy tools).
• Critical CVE in bundled underscore@1.8.3 (arbitrary code execution) with no CSP and DOM-XSS sinks present — amplified risk.
• No CSP + scripting+<all_urls>+declarativeNetRequestWithHostAccess enables full page interception and JS injection across all sites.
• Uninstall URL hijack configured; brand impersonation (Gemini/Claude) without confirmed ownership by those vendors.
• management permission allows enumerating and disabling other installed extensions — rare and high-impact capability.

Evidence

• cve_critical_bundled_lib crx underscore@1.8.3 has CVE-2021-23358 (critical ACE); fixed in 1.12.1. No CSP present — CVE amplifier ×1.5 applies.
• no_csp_mv3 manifest content_security_policy is null; MV3 default restricts eval but DOM sinks and Function() constructor still active.
• function_constructor_code_finding crx new Function() constructor found in chunks/BS5W3VC5.js — dynamic code execution path.
• dom_xss_sinks_no_csp crx 3 innerHTML-from-variable findings across background.js and chunks; no CSP to mitigate DOM-XSS.
• management_permission manifest management permission declared — can enumerate/disable other extensions. Unusual for an AI assistant.
• uninstall_url_hijack crx chrome.runtime.setUninstallURL() set; target URL not captured but hijack confirmed.
• brand_impersonation store brands_mentioned: [claude, gemini]; confirmed_owner: false; is_impersonation: true; verified_publisher does not negate.
• privacy_policy_third_party_sharing api Policy fetched, scoped, data_collection=true, third_party_sharing=true, retention=true. Third-party sharing disclosed.

CVE Exposures (2)

Permissions Breakdown

• tabs medium Access to tab URLs/titles; moderate risk with broad host access.
• scripting high Can inject JS into any page via <all_urls>; high capability.
• storage low Local data storage; low standalone risk.
• management high Can list/disable other extensions; significant privilege.
• contextMenus low Adds right-click menu items; low risk.
• clipboardRead medium Can read clipboard contents; privacy risk.
• clipboardWrite medium Can write to clipboard; moderate risk.
• declarativeNetRequestWithHostAccess high Can modify/block network requests on all URLs.
• <all_urls> (host) high Full access to all sites; broadens every other permission.

Pillar Scores

Scoring History

Bookkeeping