Top Risks

• AI sidebar processes page content across all URLs (ChatGPT/Claude/OpenRouter integration)
• Broad host permissions (<all_urls>) required for AI functionality but increase attack surface
• No Content Security Policy declared (MV3 default applies but not explicitly hardened)
• Brand mentions (ChatGPT, Claude) without confirmed ownership—verified publisher mitigates
• Content scripts on file://*/* grants local file access capability

Evidence

• Verified publisher badge store Web Store VERIFIED PUBLISHER confirms developer identity
• Featured by Google store Featured badge indicates Google review and endorsement
• AI sidebar category manifest AI extension processing page content via sidebar (ChatGPT, Claude, OpenRouter, Ollama)
• Broad host permissions manifest <all_urls> host access justified by AI sidebar functionality (injects on any page)
• Scoped privacy policy api Privacy policy fetched, extension-scoped, discloses data collection/retention/3rd-party sharing
• Domain age api surfmind.ai registered 2025-08-27 (421 days), resolves, not throwaway
• Recent maintenance store Last updated 0 months ago—actively maintained
• No malicious indicators crx No code findings, CVEs, obfuscation, or threat intel hits

Permissions Breakdown

• activeTab low Grants temporary access to active tab on user click
• alarms low Schedules periodic tasks
• scripting medium Can inject scripts into pages
• storage low Local storage for extension data
• unlimitedStorage low Removes storage quota limits
• sidePanel low Displays UI in browser sidebar
• tabs medium Can query and manipulate browser tabs
• webNavigation low Monitors navigation events

Pillar Scores

Bookkeeping