| Contextual Risk Factors | Risk Factor | | The following context increases the overall risk:• 20% increase: Access to sensitive domains increases potential impact |
| storage | Permission | | This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads. |
| tabs | Permission | | This permission enables tab management and monitoring. Rated Medium because it can track open tabs, access tab metadata, and monitor user browsing patterns. |
| *://*.casperlabs.io/* | Host | | Host permission — access limited to this URL pattern. |
| *://localhost/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.make.services/* | Host | | Host permission — access limited to this URL pattern. |
| *://cspr.live/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.cspr.live/* | Host | | Host permission — access limited to this URL pattern. |
| *://casper.live/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.casper.live/* | Host | | Host permission — access limited to this URL pattern. |
| *://casperholders.io/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.casperholders.io/* | Host | | Host permission — access limited to this URL pattern. |
| *://casperholders.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.casperholders.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.casperstats.io/* | Host | | Host permission — access limited to this URL pattern. |
| *://casperstats.io/* | Host | | Host permission — access limited to this URL pattern. |
| *://casper-qr.vercel.app/* | Host | | Host permission — access limited to this URL pattern. |
| *://picaswap.io/wcspr/* | Host | | Host permission — access limited to this URL pattern. |
| *://casperdash.io/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.casperdash.io/* | Host | | Host permission — access limited to this URL pattern. |
| *://friendly.market/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.friendly.market/* | Host | | Host permission — access limited to this URL pattern. |
| *://metacask.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.metacask.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.newland.finance/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.huobiapps.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.singlecoin.xyz/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.gitcoin.co/* | Host | | Host permission — access limited to this URL pattern. |
| *://gitcoin.co/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.casperpunks.io/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.fuzhouchain.io/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.wise.art/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.cerby.fi/* | Host | | Host permission — access limited to this URL pattern. |
| *://wiseswap.net/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.wiseswap.net/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.caspercommunity.io/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.dhfi.online/* | Host | | Host permission — access limited to this URL pattern. |
| *://dhfi.online/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.dhfi.io/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.minorityprogrammers.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://minorityprogrammers.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.dotoracle.network/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.arcadia.agency/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.arcadiamgroup.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.skybridger.io/* | Host | | Host permission — access limited to this URL pattern. |
| *://skybridger.io/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.caspertigers.io/* | Host | | Host permission — access limited to this URL pattern. |
| *://caspertigers.io/* | Host | | Host permission — access limited to this URL pattern. |
| *://casper-pad.io/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.casper-pad.io/* | Host | | Host permission — access limited to this URL pattern. |
| *://the-swappery.io/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.the-swappery.io/* | Host | | Host permission — access limited to this URL pattern. |
| *://the-swappery.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.the-swappery.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://caspernft.market/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.caspernft.market/* | Host | | Host permission — access limited to this URL pattern. |
| *://casperarmy.org/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.casperarmy.org/* | Host | | Host permission — access limited to this URL pattern. |
| *://casperarmy.io/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.casperarmy.io/* | Host | | Host permission — access limited to this URL pattern. |
| *://casper.army/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.casper.army/* | Host | | Host permission — access limited to this URL pattern. |
| *://dln.org/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.dln.org/* | Host | | Host permission — access limited to this URL pattern. |
| *://dlndao.org/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.dlndao.org/* | Host | | Host permission — access limited to this URL pattern. |
| *://verifiedimpactnfts.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.verifiedimpactnfts.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://casperchess.caspergames.eth/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.kunftmarketplace.io/* | Host | | Host permission — access limited to this URL pattern. |
| *://kunftmarketplace.io/* | Host | | Host permission — access limited to this URL pattern. |
| *://crdao.ossa.dev/* | Host | | Host permission — access limited to this URL pattern. |
| *://casper-vesting.vercel.app/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.eggforce.io/* | Host | | Host permission — access limited to this URL pattern. |
| *://eggforce.io/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.playcasper.io/* | Host | | Host permission — access limited to this URL pattern. |
| *://playcasper.io/* | Host | | Host permission — access limited to this URL pattern. |
| *://friendlysoccer.io/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.friendlysoccer.io/* | Host | | Host permission — access limited to this URL pattern. |
| *://dive.casper.dev/* | Host | | Host permission — access limited to this URL pattern. |
| *://cspr.studio/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.cspr.studio/* | Host | | Host permission — access limited to this URL pattern. |
| *://cspr.fyi/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.cspr.fyi/* | Host | | Host permission — access limited to this URL pattern. |
| *://ve.cspr.university/* | Host | | Host permission — access limited to this URL pattern. |
| *://tricorn.network/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.tricorn.network/* | Host | | Host permission — access limited to this URL pattern. |
| *://chainlendar.io/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.chainlendar.io/* | Host | | Host permission — access limited to this URL pattern. |
| *://ultimatedivision.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.ultimatedivision.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://dev.dmusic.io/* | Host | | Host permission — access limited to this URL pattern. |
| *://staging.dmusic.io/* | Host | | Host permission — access limited to this URL pattern. |
| *://beta.dmusic.io/* | Host | | Host permission — access limited to this URL pattern. |
| *://dmusic.io/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.dmusic.io/* | Host | | Host permission — access limited to this URL pattern. |
| *://casperswap.xyz/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.casperswap.xyz/* | Host | | Host permission — access limited to this URL pattern. |
| *://casperswap.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.casperswap.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://casper.team.finance/* | Host | | Host permission — access limited to this URL pattern. |
| *://droplinked.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.droplinked.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://bithotel.io/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.bithotel.io/* | Host | | Host permission — access limited to this URL pattern. |
| *://testonchain.ossa.dev/* | Host | | Host permission — access limited to this URL pattern. |
| *://dcm-swiss.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.dcm-swiss.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://casper.dev/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.casper.dev/* | Host | | Host permission — access limited to this URL pattern. |
| *://div3.app/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.div3.app/* | Host | | Host permission — access limited to this URL pattern. |
| *://div3.art/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.div3.art/* | Host | | Host permission — access limited to this URL pattern. |
| *://div3.dev/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.div3.dev/* | Host | | Host permission — access limited to this URL pattern. |
| *://div3.in/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.div3.in/* | Host | | Host permission — access limited to this URL pattern. |
| *://div3.io/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.div3.io/* | Host | | Host permission — access limited to this URL pattern. |
| *://div3.network/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.div3.network/* | Host | | Host permission — access limited to this URL pattern. |
| *://ggxchain.io/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.ggxchain.io/* | Host | | Host permission — access limited to this URL pattern. |
| *://mystra.io/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.mystra.io/* | Host | | Host permission — access limited to this URL pattern. |
| *://mystra.app/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.mystra.app/* | Host | | Host permission — access limited to this URL pattern. |
| *://cspr.market/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.cspr.market/* | Host | | Host permission — access limited to this URL pattern. |
| *://cspr.click/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.cspr.click/* | Host | | Host permission — access limited to this URL pattern. |
| *://cspr.name/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.cspr.name/* | Host | | Host permission — access limited to this URL pattern. |
| *://cspr.cloud/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.cspr.cloud/* | Host | | Host permission — access limited to this URL pattern. |
| Access to Sensitive Domains | Risk Factor | | This extension requests access to sensitive domains: *://*.huobiapps.com/*, *://*.singlecoin.xyz/*, *://*.wise.art/*, *://wiseswap.net/*, *://*.wiseswap.net/*, *://*.skybridger.io/*, *://skybridger.io/*, *://casper-vesting.vercel.app/*, *://staging.dmusic.io/* |
| notifications | Permission | | This permission displays system notifications. Rated Low because it can only show user-visible notifications without accessing system data. |