| cookies | Permission | | This permission provides full access to read and modify browser cookies. Rated High because it can steal session tokens, modify authentication cookies, and compromise accounts across websites. |
| Contextual Risk Factors | Risk Factor | | The following context increases the overall risk:• 20% increase: Access to sensitive domains increases potential impact |
| storage | Permission | | This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads. |
| activeTab | Permission | | This permission grants temporary access to the current tab. Rated Medium because it can access current page content when invoked, though limited to user-initiated actions. |
| https://cs.qimuai.cn/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.bilibili.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.b23.tv/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.xiaohongshu.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.xhslink.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.douyin.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.twitter.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.x.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.weibo.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.weibo.cn/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.zhihu.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.substack.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.lennysnewsletter.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://mp.weixin.qq.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.tiktok.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.youtube.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.youtu.be/* | Host | | Host permission — access limited to this URL pattern. |
| *://ted.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.ted.com/* | Host | | Host permission — access limited to this URL pattern. |
| https://accounts.google.com/* | Host | | Host permission — access limited to this URL pattern. |
| Access to Sensitive Domains | Risk Factor | | This extension requests access to sensitive domains: *://*.twitter.com/*, *://*.substack.com/*, https://accounts.google.com/* |
| contextMenus | Permission | | This permission adds items to browser context menus. Rated Medium because it only modifies right-click menus without access to page content. |
| notifications | Permission | | This permission displays system notifications. Rated Low because it can only show user-visible notifications without accessing system data. |