| cookies | Permission | | This permission provides full access to read and modify browser cookies. Rated High because it can steal session tokens, modify authentication cookies, and compromise accounts across websites. |
| downloads | Permission | | This permission controls file downloads and accesses download history. Rated High because it can download malicious files, access sensitive downloaded documents, and track user download patterns. |
| Contextual Risk Factors | Risk Factor | | The following context increases the overall risk:• 20% increase: Access to sensitive domains increases potential impact• 15% increase: Older manifest version lacks modern security controls |
| tabs | Permission | | This permission enables tab management and monitoring. Rated Medium because it can track open tabs, access tab metadata, and monitor user browsing patterns. |
| storage | Permission | | This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads. |
| unlimitedStorage | Permission | | This permission removes storage quota restrictions. Rated Medium because it can store large amounts of user data without limits, potentially impacting browser performance and storing extensive tracking data. |
| management | Permission | | This permission manages other installed extensions. Rated Medium because it can enable/disable other extensions and modify their settings, with changes being visible to users. |
| *://*.jiyoujia.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.taobao.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.alimama.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.tmall.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.tmall.hk/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.alitrip.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.yao.95095.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.fliggy.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.liangxinyao.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.1688.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.360.cn/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.jd.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.dataoke.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.haodanku.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.shihuizhu.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.xuandan.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.xuanpin.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.tky.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.qingtaoke.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.pinduoduo.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.suning.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.taokezhushou.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.taokezhushou.cn/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.taokezhushou.net/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.chaoyouhui.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.chaoyouhui.cn/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.chaoyouhui.net/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.baidu.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.alicdn.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.test.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.so.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.sogou.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://cn.bing.com/* | Host | | Host permission — access limited to this URL pattern. |
| Access to Sensitive Domains | Risk Factor | | This extension requests access to sensitive domains: *://*.qingtaoke.com/*, *://*.suning.com/*, *://cn.bing.com/* |
| Older Manifest Version | Risk Factor | | This extension uses Manifest Version 2 |