Top Risks

• Gmail dev email with no developer name and WhatsApp brand impersonation — unverifiable identity claiming a major platform.
• Privacy policy is Google's own account policy, not scoped to this extension — admits data collection and 3rd-party sharing.
• Content script on web.whatsapp.com can read all WhatsApp messages; data forwarded to 6 AI APIs not declared in host_permissions.
• Install URL hijack opens web.whatsapp.com on install; AI extension processing sensitive message content.
• js_external_hosts includes api.deepseek.com, api.x.ai, v3.wasubo.com not present in host_permissions — undeclared endpoints.

Evidence

• brand_impersonation store WhatsApp brand mentioned; developer domain is gmail.com; confirmed_owner=false; is_impersonation=true.
• privacy_policy_generic store Policy URL is Google account policy; scope_extension=false, data_collection=true, third_party_sharing=true → +10.0 privacy.
• free_webmail_no_devname store Developer email watoolsmarketing@gmail.com; developer_name empty; no business website verifiable.
• install_url_hijack manifest install_url_hijack=true targeting https://web.whatsapp.com on install.
• ai_extension_page_content manifest Content script on WhatsApp with host perms to 6 AI APIs (OpenAI, Anthropic, Gemini, Cohere, Groq, Mistral).
• undeclared_external_hosts crx js_external_hosts includes api.deepseek.com, api.x.ai, v3.wasubo.com absent from host_permissions.
• dom_xss_sink crx innerHTML assignment in content.js; CSP present but DOM-XSS risk within WhatsApp context.
• verified_publisher_free_webmail store verified_publisher=true but email is gmail.com with no dev name; reputation floor applied at 7.5 per rubric.

Permissions Breakdown

• storage low Local data persistence; standard low risk.
• activeTab low Access only to current active tab on user gesture.
• identity low OAuth token access; low risk without broad scopes declared.
• alarms low Scheduling; no data access risk.
• notifications low Display notifications; no data exfil risk.
• unlimitedStorage low Extended local storage quota; no network risk.
• https://web.whatsapp.com/* high Content script injection into WhatsApp; can read all messages/contacts.
• https://iagents.wasubo.com/* medium Backend API; data sent to developer-controlled server.
• https://api.openai.com/* medium WhatsApp content may be forwarded to OpenAI.
• https://api.anthropic.com/* medium WhatsApp content may be forwarded to Anthropic.
• https://generativelanguage.googleapis.com/* medium WhatsApp content may be forwarded to Google AI.
• https://api.cohere.ai/* medium WhatsApp content may be forwarded to Cohere.
• https://api.groq.com/* medium WhatsApp content may be forwarded to Groq.
• https://api.mistral.ai/* medium WhatsApp content may be forwarded to Mistral.

Pillar Scores

Bookkeeping