Top Risks

• Privacy policy admits data collection + third-party sharing but is not scoped to this extension (generic Google Sites policy).
• Content script injected on <all_urls> + clipboardRead + OpenAI API calls: page content and clipboard can be exfiltrated.
• Developer is a free-webmail alias (gmail) with no verified business identity; no domain age signal available.
• No CSP declared (MV3 default applies but no explicit policy); 9 distinct external hosts including analytics (amplitude) and payments (lemonsqueezy).
• new Function() constructor present across 4 JS files; no CSP amplifies risk of code execution.

Evidence

• broad_host_access manifest <all_urls> host permission + content_scripts on <all_urls>; AI extension sending page data to api.openai.com.
• privacy_policy_generic_with_third_party_sharing crx Policy fetched but scope_extension=false, data_collection=true, third_party_sharing=true → D-rule +10.0 privacy.
• free_webmail_developer store Developer email jzlong666@gmail.com; no business domain; no verified publisher badge.
• external_hosts_diverse crx 9 external hosts: api.openai.com, dict.youdao.com, amplitude (analytics), lemonsqueezy (payments), unsplash, discord, notion, webpack, localhost.
• function_constructor_multiple_files crx new Function() found in 4 JS files (content_script, options, popup, welcome); no CSP present.
• ai_extension_page_content store AI category extension processes page content and sends to OpenAI; +2.5 webstore AI signal.
• is_featured_by_google store Extension carries Google Featured badge; partial reputation credit applied.
• no_csp manifest content_security_policy is null; combined with function_constructor findings increases code risk.

Permissions Breakdown

• storage low Standard local data persistence; low risk.
• contextMenus low Adds right-click menu entries; typical for language learning tools.
• clipboardRead medium Can read clipboard contents; potential for capturing sensitive copied data.
• <all_urls> (host_permission) high Content script injected on all sites; broad data access paired with OpenAI API calls.
• http://localhost/* (host_permission) low Local dev endpoint; low external risk.

Pillar Scores

Bookkeeping