Top Risks

• Content script injected on <all_urls> with no CSP; any XSS via innerHTML sink affects every visited page.
• Privacy policy is Google's own generic policy — not scoped to this extension; data_collection and third_party_sharing both true with no extension context.
• Developer uses free Gmail address with no verifiable business identity, low accountability.
• Extension contacts 7 external hosts including api.openai.com and an anonymous AWS Lambda, raising data-exfil surface.
• AI-assisted language tool sends user content to OpenAI API; no disclosed data retention or scope policy.

Evidence

• content_scripts_all_urls manifest content_scripts matches <all_urls>; runs on every site the user visits.
• no_csp crx content_security_policy is null; no mitigation for XSS or remote-script loading.
• dom_xss_sink crx popup.js assigns innerHTML from variable without sanitization — DOM-XSS risk elevated by absent CSP.
• generic_privacy_policy store Policy URL is myaccount.google.com/privacypolicy — Google's own policy, not extension-scoped.
• gmail_developer store Developer email auxiliaapps@gmail.com; free webmail, no verifiable business domain.
• external_hosts crx 7 external hosts including api.openai.com and anonymous AWS Lambda wasy9t5yp4.execute-api.us-east-2.amazonaws.com.
• featured_badge store is_featured_by_google == true; partial trust signal reduces reputation risk.
• ai_openai_contact crx Extension contacts api.openai.com; user text likely transmitted to OpenAI with no disclosed retention policy.

Permissions Breakdown

• storage low Stores local user data; low standalone risk.
• notifications low Can push notifications; limited abuse surface without host access.
• alarms low Schedules background callbacks; low risk alone.
• content_scripts:<all_urls> high Injects JS into every page visited; broad reach amplifies all other risks.

Pillar Scores

Bookkeeping