| Contextual Risk Factors | Risk Factor | | The following context increases the overall risk:
β’ 19% increase: Access to sensitive domains increases potential impact |
| storage | Permission | | This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads. |
| activeTab | Permission | | This permission grants temporary access to the current tab. Rated Medium because it can access current page content when invoked, though limited to user-initiated actions. |
| https://chatgpt.com/* | Host | | Host permission β access limited to this URL pattern. |
| https://chat.openai.com/* | Host | | Host permission β access limited to this URL pattern. |
| https://claude.ai/* | Host | | Host permission β access limited to this URL pattern. |
| https://gemini.google.com/* | Host | | Host permission β access limited to this URL pattern. |
| https://grok.com/* | Host | | Host permission β access limited to this URL pattern. |
| https://copilot.microsoft.com/* | Host | | Host permission β access limited to this URL pattern. |
| https://www.perplexity.ai/* | Host | | Host permission β access limited to this URL pattern. |
| https://perplexity.ai/* | Host | | Host permission β access limited to this URL pattern. |
| https://dropdat.app/* | Host | | Host permission β access limited to this URL pattern. |
| https://*.dropdat.app/* | Host | | Host permission β access limited to this URL pattern. |
| https://*.clerk.accounts.dev/* | Host | | Host permission β access limited to this URL pattern. |
| https://clerk.accounts.dev/* | Host | | Host permission β access limited to this URL pattern. |
| https://images.openai.com/* | Host | | Host permission β access limited to this URL pattern. |
| https://files.oaiusercontent.com/* | Host | | Host permission β access limited to this URL pattern. |
| https://cdn.oaistatic.com/* | Host | | Host permission β access limited to this URL pattern. |
| https://*.anthropic.com/* | Host | | Host permission β access limited to this URL pattern. |
| https://files.claude.ai/* | Host | | Host permission β access limited to this URL pattern. |
| https://lh3.googleusercontent.com/* | Host | | Host permission β access limited to this URL pattern. |
| https://lh4.googleusercontent.com/* | Host | | Host permission β access limited to this URL pattern. |
| https://lh5.googleusercontent.com/* | Host | | Host permission β access limited to this URL pattern. |
| https://lh6.googleusercontent.com/* | Host | | Host permission β access limited to this URL pattern. |
| https://*.gstatic.com/* | Host | | Host permission β access limited to this URL pattern. |
| https://*.googleusercontent.com/* | Host | | Host permission β access limited to this URL pattern. |
| Access to Sensitive Domains | Risk Factor | | This extension requests access to sensitive domains: https://gemini.google.com/*, https://lh3.googleusercontent.com/*, https://lh4.googleusercontent.com/*, https://lh5.googleusercontent.com/*, https://lh6.googleusercontent.com/*, https://*.googleusercontent.com/* |
| contextMenus | Permission | | This permission adds items to browser context menus. Rated Medium because it only modifies right-click menus without access to page content. |
| notifications | Permission | | This permission displays system notifications. Rated Low because it can only show user-visible notifications without accessing system data. |