The extension only makes network requests to [domain withheld], the publisher's own domain, to fetch metadata and authentication tokens for its LeetCode helper functionality. Permissions are limited to storage and unlimitedStorage. Content scripts are restricted to [domain withheld] and [domain withheld]. There is no evidence of data exfiltration, tracking, or code injection beyond the declared scope. The ML model likely over-fit on common patterns like innerHTML usage and early script execution, which are necessary for page modification.