Top Risks

• Privacy policy is parent company's generic policy (consensys.net), not scoped to MetaMask extension; admits data collection and third-party sharing.
• No developer name listed; identity relies solely on developer email at metamask.io.
• manifest_source is html_fallback — CRX could not be scanned; permissions and code surface are unverifiable.
• 12M installs makes this a high-blast-radius target if ever compromised or transferred.
• Rating of 2.7 is low; no review red flags detected but user sentiment warrants attention.

Evidence

• privacy_policy_not_scoped store Policy at consensys.net/privacy-policy/ is generic org policy; scope_extension=false, data_collection=true, third_party_sharing=true → Privacy +10.0.
• manifest_not_available store manifest_source=html_fallback, js_files_scanned=0; permissions and code quality cannot be assessed from CRX.
• no_developer_name store developer_name is empty; Reputation start 5.0 +1.0 no-name; email domain metamask.io is confirmed owner, not throwaway.
• confirmed_owner_not_impersonation store brand_mention.confirmed_owner=true, is_impersonation=false; no impersonation penalty applied.
• high_install_blast_radius store 12M installs → Webstore +1.0 (>10K) +1.0 (>100K) +0.5 (>1M); no bad hosts or affiliate hits.
• low_rating store Rating 2.7; rating_count not provided so +1.0 threshold (>=50 ratings) cannot be confirmed — not applied conservatively.
• no_cve_no_bad_hosts api cve_findings_raw=[], bad_host_hits=[], affiliate_hits=[], monetization_hits=[]; CVE pillar=0.0.
• recently_updated store months_since_update=0; Maintenance pillar=0.0.

Permissions Breakdown

• unknown (manifest_source=html_fallback) low CRX not scanned; no declared permissions observable from store listing.

Pillar Scores

Bookkeeping