Top Risks

• Header modification on all URLs enables MITM and credential manipulation
• Install URL hijack detected - redirects to third-party on installation
• Privacy policy admits data collection and third-party sharing without scoping
• Broad host access (<all_urls>) with header modification capability

Evidence

• declarativeNetRequestWithHostAccess + <all_urls> crx Can modify HTTP headers on all websites, justifying category as DeveloperTools
• install_url_hijack crx Extension redirects to external URL on installation (target: null)
• privacy_policy_classification api Policy admits data collection and 3rd-party sharing without extension-specific scope
• host_permissions crx <all_urls> grants access to all sites for header manipulation
• verified_publisher store Web Store verified publisher badge present
• code_findings_raw crx No suspicious code patterns detected in 4 scanned JS files
• cve_findings_raw api No known CVEs in bundled libraries

Permissions Breakdown

• storage low Standard local storage for settings and profiles
• tabGroups medium Can view and manipulate tab groups, enabling tracking of user workflows
• declarativeNetRequestWithHostAccess high Can modify HTTP headers on all sites, enabling MITM and content injection
• <all_urls> high Broad host access to all websites the user visits

Pillar Scores

Bookkeeping