The extension implements its advertised functionality: copying web layouts into [domain withheld], highlighting Builder content for editing, and capturing page data for a Fusion Agent. All data collection (DOM, screenshot, page metadata) is user-initiated and sent only to the publisher's own domain ([domain withheld]). The declarativeNetRequest rule removes framing headers only when the initiator is [domain withheld], a typical workaround for web-based editors. No evidence of unauthorized data exfiltration, code injection into third-party pages, tracking, or obfuscation beyond standard minification. The high-risk signals from the ML model and third-party score are based on broad permissions and script patterns that are fully explained by the extension's legitimate design-picking and site-editing workflow.