All network activity in this extension flows exclusively to [domain withheld] (the publisher's own domain), *.[domain withheld] (the backend database service the publisher explicitly declares), and the three declared retailer domains ([domain withheld], [domain withheld], [domain withheld]) for auto-opening drop alert tabs. The ML score of 0.11 is low and the elevated risk-engine score stems from broad-but-declared permissions (identity for Discord OAuth, offscreen for audio playback, tabs for opening retailer pages) that are each justified by the extension's core function. No obfuscation, eval, remote code loading, or unauthorized data flows were found in any of the 11 files reviewed. The third-party chrome-stats risk factors (low user count, recently created) corroborate the ML uncertainty but provide no evidence of malice.