Top Risks

• Broad host permissions (*://*/*) allow access to all websites
• Proxy + cookies permissions enable traffic interception and session hijacking if compromised
• No verifiable privacy policy (fetch failed) despite handling enterprise authentication flows
• Low rating (2.8) suggests potential quality or transparency issues

Evidence

• proxy_permission manifest Extension requests 'proxy' permission to enforce explicit cloud proxy settings.
• cookies_permission manifest Requests 'cookies' permission with access to all hosts.
• host_permissions_broad manifest Host permissions include *://*/*, ws://*/*, and wss://*/*.
• content_scripts_narrow manifest Content scripts restricted to goskope.com authentication endpoints only.
• privacy_policy_missing api Privacy policy fetch failed (HTTPError); unable to verify data handling practices.
• last_updated store Updated March 25, 2026 (7 months ago).
• rating_low store Rating 2.8 out of 5 stars.
• developer_verified store Developer name 'Netskope' matches netskope.com domain; appears to be legitimate security vendor.

Permissions Breakdown

• alarms low Scheduled tasks, minimal risk surface.
• proxy high Can route all browser traffic through Netskope cloud proxy (stated function).
• storage low Local data persistence.
• cookies high Access to session cookies; paired with broad host access creates auth token exposure.
• declarativeNetRequest medium Can block/modify network requests, less invasive than webRequest.

Pillar Scores

Bookkeeping