Top Risks

• Privacy policy admits data collection and third-party sharing but is NOT scoped to this extension — worst-case privacy posture.
• Brand-mention impersonation: 'YouTube' in name/title without confirmed owner; verified publisher mitigates but doesn't eliminate risk.
• manifest_source is html_fallback — actual permissions unverifiable; true capability surface unknown.
• Developer name field empty; reduces accountability signal despite verified publisher badge.
• 1M+ installs with broad YouTube access creates significant data-reach if policy terms are exercised.

Evidence

• privacy_policy_admits_collection_and_sharing_no_scope api Policy fetched; scope_extension=false, data_collection=true, third_party_sharing=true → v3.5 rule D: +10.0 privacy pillar.
• brand_impersonation_youtube store brand_mention.is_impersonation=true, brands=['youtube'], confirmed_owner=false. Verified publisher → +1.0 reputation.
• verified_publisher_and_featured store verified_publisher=true AND is_featured_by_google=true; apply -3.0 reputation discount, floor 2.0.
• manifest_html_fallback_1m_installs store manifest_source=html_fallback AND installs=1,000,000 → v3.5 rule B: +3.0 webstore.
• install_count_over_1m store +1.0 (>100k) +1.0 (>1M) webstore; -0.5 popularity-trust offset (rating 4.7 >=4.0).
• no_bad_hosts_no_monetization_no_affiliates api threat_intel: bad_host_hits=[], monetization_hits=[], affiliate_hits=[] — no network threat signals.
• recently_updated store months_since_update=3; maintenance pillar = 0.0.
• no_code_findings_obfuscation_zero crx code_findings_raw=[], obfuscation_score=0.0, js_files_scanned=0 (html_fallback); code quality = 0.0.

Permissions Breakdown

• manifest_source:html_fallback medium No CRX available; permissions inferred from store listing only — exact capabilities unknown.

Pillar Scores

Scoring History

Bookkeeping