The extension is a legitimate browser fingerprint obfuscation and proxy management tool consistent with its declared purpose. intercepts Canvas, WebGL, Audio, Navigator, Screen, and Date APIs to inject locally-computed noise—all data flows locally into pages from chrome.storage, not outward. The service worker sets __sps_seed cookies (1-year expiry) on visited sites to persist per-site fingerprint seeds (required for stable spoofing), uses chrome.scripting.executeScript solely to write the local profile into window.__SPS_PROFILE__, manages user-configured proxy settings via chrome.proxy.settings.set, silently supplies stored proxy credentials via onAuthRequired, and fetches the public IP from api.ip.sb and [domain withheld] declared in manifest host_permissions—for proxy-connectivity verification. The large js_hex_obfuscation (666) and js_exclamation (861) counts originate from the embedded tldts TLD-parsing library's data tables and minified Preact code, not intentional anti-analysis. The CWS-published manifest summary omits host_permissions and optional_host_permissions present in the bundled manifest (likely a CWS API display limitation), but the declared permissions are used only for IP detection and broad per-site content script injection—both core features of a fingerprint protection tool.