The only 950KB of shipped logic in this bundle () is a webpack build of a new-tab dashboard plus a verbatim embed of the open-source ChatGPTBox provider stack; every outbound request goes to the publisher's own [domain withheld], to [domain withheld] endpoints the user configures, or to [domain withheld] for bookmark thumbnails, and there is no analytics, affiliate, WhatsApp-spam or browsing-history sink anywhere in the reviewed code. I specifically checked whether the 15-minute remote-config pull at:448 could redirect the ChatGPT session token: getUserConfig (:2682) reads top-level storage keys via Object.keys(defaultConfig), while the remote merge writes only into the single nested `config` key, so the server cannot rewrite customChatGptWebApiUrl and the Bearer only ever reach OpenAI. The permhash cluster ( malicious) and the ML score contradict the code, and the chrome-stats score is purely permission-derived; confidence is medium rather than high because the bundle is incomplete (11 files vs the model's 142;, /* and referenced by and:357 were not provided, so the GET_CONFIG consumer and most of the 5.66MB of JS the model scored could not be read). Hygiene notes, not findings: declares spoofing for [domain withheld] but is dead code (the manifest has no declarative_net_request key or permission),:17428 pings /?vk=<install|update> and showNewFeaturesIfSet (:174) opens whatever URL that first-party endpoint returns, is a broken build artifact that throws a babel-loader ENOENT with the developer's local path, and builds its sidebar via innerHTML from stored bookmark titles.