Top Risks

• Uninstall and install URL hijack both point to haberikra.com — clear monetization/traffic-siphoning pattern.
• Privacy policy is Google's generic policy (scope_extension=false, data_collection=true, third_party_sharing=true) — scores maximum privacy penalty.
• NewTab override + search permission enables ad-monetization on every new tab; classic wallpaper shell pattern.
• Extension contacts 9 external hosts (haberikra.com, chatgpt.com, Instagram, Netflix, YouTube, X, etc.) far beyond wallpaper function.
• Stale 15 months with no CSP; MV3 but csp_present=false and newtab override raises governance concern.

Evidence

• install_url_hijack crx onInstalled opens haberikra.com with UTM params — third-party traffic monetization on every install.
• uninstall_url_hijack crx setUninstallURL points to haberikra.com — Webstore +3.0 each for install and uninstall hijack.
• privacy_policy_generic store Policy URL is Google account policy: scope_extension=false, data_collection=true, third_party_sharing=true → +10.0 Privacy (v3.5-D).
• newtab_override manifest chrome_url_overrides.newtab present; combined with search permission scores as monetization-shell NewTab.
• js_external_hosts_broad crx 9 external hosts including haberikra.com, chatgpt.com, Instagram, Netflix, YouTube — far beyond wallpaper scope.
• maintenance_stale store 15 months since update → Maintenance +6.0 (6-24mo band).
• no_csp manifest csp_present=false on MV3 extension; no additional MV2 penalty but noted for newtab surface.
• fan_content_theme_shell store Anime-IP wallpaper shell with install/uninstall hijack and newtab override matches fan-content/theme shell pattern (+1.5 Webstore).

Permissions Breakdown

• search medium Allows reading/modifying search queries; combined with newtab override enables search monetization.
• chrome_url_overrides.newtab medium Replaces every new tab; primary surface for ad/redirect monetization in wallpaper shells.

Pillar Scores

Bookkeeping