| Contextual Risk Factors | Risk Factor | | The following context increases the overall risk:• 20% increase: Access to sensitive domains increases potential impact |
| storage | Permission | | This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads. |
| unlimitedStorage | Permission | | This permission removes storage quota restrictions. Rated Medium because it can store large amounts of user data without limits, potentially impacting browser performance and storing extensive tracking data. |
| activeTab | Permission | | This permission grants temporary access to the current tab. Rated Medium because it can access current page content when invoked, though limited to user-initiated actions. |
| *://*.amazon.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.amazon.co.jp/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.amazon.co.uk/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.amazon.de/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.amazon.fr/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.amazon.it/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.amazon.es/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.amazon.ca/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.amazon.com.au/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.tiktok.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.taobao.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.tmall.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.jd.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.ozon.ru/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.market.yandex.ru/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.shopee.sg/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.shopee.co.id/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.shopee.com.my/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.shopee.co.th/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.shopee.vn/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.shopee.ph/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.shopee.com.br/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.temu.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.myshopify.com/* | Host | | Host permission — access limited to this URL pattern. |
| Access to Sensitive Domains | Risk Factor | | This extension requests access to sensitive domains: *://*.amazon.com/*, *://*.amazon.co.jp/*, *://*.amazon.co.uk/*, *://*.amazon.de/*, *://*.amazon.fr/*, *://*.amazon.it/*, *://*.amazon.es/*, *://*.amazon.ca/*, *://*.amazon.com.au/*, *://*.myshopify.com/* |
| alarms | Permission | | This permission schedules periodic tasks. Rated Low because it can only trigger events at specified times without access to sensitive data. |
| notifications | Permission | | This permission displays system notifications. Rated Low because it can only show user-visible notifications without accessing system data. |
