Top Risks

• Default search-engine override routes all browser queries to simplesearchsafe.com controlled by unverified gmail developer.
• Developer uses free-webmail (gmail.com); no verified business identity; domain_age_ct not queryable.
• Privacy policy admits data collection and third-party sharing but lacks retention disclosure.
• Rating of 3.1 indicates user dissatisfaction; extension markets as 'Safe Search' but replaces default search silently.
• No CSP declared (MV3 gets default; no additional penalty) but zero JS scanned — surface area opaque.

Evidence

• search_provider_override manifest chrome_settings_overrides sets is_default=true, search_url=https://search.simplesearchsafe.com/query — all queries hijacked.
• free_webmail_developer store Developer email jimmyle20201@gmail.com; no verified publisher badge; brand domain gmail.com.
• low_rating store Rating 3.1 — below 3.5 threshold; user dissatisfaction signal for a search-override extension.
• privacy_policy_third_party_sharing api Policy fetched: scope_extension=true, data_collection=true, third_party_sharing=true, retention=false.
• search_provider_mismatch_domain manifest Privacy policy on simplesafesearch.com; favicon and search_url on simplesearchsafe.com — two distinct domains.
• no_js_files crx js_file_count=0, js_files_scanned=0 — extension surface is entirely the search override; code audit not possible.
• wayback_fetch_error api Wayback ownership check returned fetch_error:ConnectionError; historical ownership unverifiable.
• maintenance_6_to_12_months store months_since_update=9; falls in 6–12mo band (+3.5 maintenance score).

Permissions Breakdown

• chrome_settings_overrides.search_provider (is_default=true) high Silently replaces default search engine with simplesearchsafe.com; all queries routed to unknown operator.

Pillar Scores

Bookkeeping