Top Risks

• Privacy policy is Google's generic account policy — not scoped to this extension; data_collection+third_party_sharing admitted without extension-specific disclosure.
• Uninstall URL hijack detected; install hook opens https://pdf-to-jpg.app/welcome — monetization-shell pattern.
• Developer domain pdf-to-jpg.app does not resolve — no accountable publisher reachable.
• No developer name listed; verified badge and featured status cannot compensate for non-resolving dev domain (v3.5 invariant 0c caps discount to -1.0).
• Stale 16 months with non-resolving dev domain and generic privacy policy — long-term governance risk.

Evidence

• uninstall_url_hijack + install_url_hijack crx Extension sets uninstall redirect and opens https://pdf-to-jpg.app/welcome on install — monetization-shell signals.
• privacy_policy_generic_google store Policy URL is myaccount.google.com/privacypolicy — scope_extension=false, data_collection=true, third_party_sharing=true → +10.0 Privacy (rule D).
• developer_domain_not_resolving api threat_intel.developer_domain_info.resolves=false; caps verified-publisher discount to -1.0 per invariant 0c/v3.5.
• verified_publisher + featured_by_google store Both badges present but discount capped at -1.0 due to non-resolving domain (invariant 0c).
• no_developer_name store developer_name is empty string; +1.0 Reputation penalty for missing 'Offered by'.
• maintenance_stale_16mo store 16 months since update → +6.0 Maintenance (12-24mo band).
• js_external_hosts crx External JS host pdf-to-jpg.app referenced; domain does not resolve — dead CDN risk.
• install_count_low_with_hijacks store Only 870 installs yet both install and uninstall URL hooks are active — disproportionate monetization surface.

Pillar Scores

Bookkeeping