The extension's permissions (scripting, storage, activeTab, host permissions for Twitch) are necessary for its core functionality of injecting emotes and enhancing chat on Twitch and Kick. All network requests go to 7TV's own servers ([domain withheld], [domain withheld]) or supported platforms (Twitch, BTTV, FFZ), which are first-party destinations aligned with its purpose. The optional management permission is used for a user-initiated compatibility check. No evidence of data exfiltration, unauthorized collection, or injection beyond declared hosts was found. The risk-engine's high severity rating is due solely to the broad permissions, which are required for a legitimate chat enhancement extension.