Top Risks

• Privacy policy is Apple's generic corporate policy — does not scope data collection to this extension specifically.
• nativeMessaging + *://*/* host access grants near-native code execution reach across all browsing sessions.
• Low rating (2.3) at 6M installs may signal user-experience issues or platform-integration frustrations.
• Operator cluster sibling (fkepacicchenbjecpbpbclokcabebhah) under same fingerprint warrants verification.
• No CSP declared (MV3 mitigates strict default, but explicit policy absent).

Evidence

• developer_identity store Developer is Apple Inc. (apple.com), domain resolves, not a throwaway; recognized org discount applies.
• native_messaging_recognized manifest has_native_messaging=true, publisher_recognized=true — companion app from Apple is expected.
• broad_host_access manifest host_permissions *://*/* + content_scripts *://*/* justified for password-manager autofill category.
• privacy_policy_generic api Policy fetched but scope_extension=false, data_collection=true, third_party_sharing=false → +10 privacy pillar.
• no_cve_no_bad_hosts crx cve_findings_raw empty, bad_host_hits empty, affiliate_hits empty, monetization_hits empty.
• clean_code crx code_findings_raw empty, obfuscation_score=0.0, js_external_hosts empty — no exfil indicators.
• operator_cluster api sibling_count=1 (fkepacicchenbjecpbpbclokcabebhah) under same dev email fingerprint.
• low_rating store Rating 2.3 at 6M installs; review_red_flags match_count=0, no malware/redirect complaints detected.

Permissions Breakdown

• privacy high Can read/modify browser privacy settings; HIGH-impact capability per rubric.
• nativeMessaging high Communicates with native app (iCloud Passwords helper); publisher_recognized=true mitigates.
• host_permissions: *://*/* high Broad host access across all URLs; justified for password-manager autofill function.
• content_scripts_matches: *://*/* high Content scripts on every site; expected for autofill but significant reach.
• scripting medium Dynamic script injection; paired with broad host access increases surface.
• webNavigation medium Observes all navigation events; needed to trigger autofill on page load.
• declarativeContent low Controls extension UI visibility; low direct risk.
• storage low Local extension storage; standard for settings persistence.
• contextMenus low Adds right-click menu entries; minimal risk.

Pillar Scores

Operator Siblings (1)

Other extensions sharing this developer's compound fingerprint:

• fkepacicchenbjecpbpbclokcabebhah

Scoring History

Bookkeeping