Top Risks

• Privacy policy hosted on iubenda (generic, not scoped to this extension), data_collection=false but no retention clause.
• No developer name listed; only email identity available.
• Uninstall URL hijack flag triggered (uninstall_url_hijack=true) though target not captured.
• MV3 with no CSP — no additional network penalty but reduces default hardening visibility.
• Bookmark permission grants full read/write to all browser bookmarks synced to cloud endpoint.

Evidence

• uninstall_url_hijack crx uninstall_url_hijack=true; target URL not captured. Minor concern but flagged.
• privacy_policy_generic store Policy on iubenda.com; scope_extension=false, data_collection=false, retention=false → +9.0 privacy.
• no_developer_name store developer_name is empty string; only email support@bookmarkllama.com available.
• is_featured_by_google store Extension carries Google Featured badge; partial trust signal applied.
• host_permissions_scoped manifest host_permissions limited to https://app.bookmarkllama.com/* only.
• code_clean crx code_findings_raw empty, obfuscation_score=0.0, no external JS hosts.
• maintenance_borderline store months_since_update=12 → +3.5 maintenance pillar (6-12 month band).
• threat_intel_clean api No bad_host_hits, no affiliate_hits, no monetization_hits; domain resolves, not throwaway.

Permissions Breakdown

• storage low Standard local data persistence; expected for bookmark sync tool.
• bookmarks medium Full read/write access to all browser bookmarks; core function but sensitive.
• alarms low Scheduled background tasks; low standalone risk.
• notifications low Can display notifications; minor UX surface.
• https://app.bookmarkllama.com/* low Scoped to own domain only; consistent with bookmark sync service.

Pillar Scores

Bookkeeping