All source code is clean, unminified, and implements exactly the stated purpose: playback speed control and OMDB-sourced ratings overlay on Amazon Prime Video. The single external network call goes to [domain withheld] (line 5 of) using an API key the user registers themselves — this is the extension's core feature, not covert exfiltration. The bundled manifest (MV2 with `tabs`) differs from the published manifest (MV3, no `tabs`), which is consistent with an extension that hasn't been updated in ~1400 days predating the MV3 migration; the `tabs` permission is used only to broadcast settings-change messages to other open tabs ( line 42-44), not to track browsing. The publisher's malicious track record on other extensions is the one genuinely concerning signal, but it does not make this extension malicious in the absence of any malicious code.