| Contextual Risk Factors | Risk Factor | | The following context increases the overall risk:• 20% increase: Access to sensitive domains increases potential impact |
| activeTab | Permission | | This permission grants temporary access to the current tab. Rated Medium because it can access current page content when invoked, though limited to user-initiated actions. |
| storage | Permission | | This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads. |
| *://*.albertsons.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.safeway.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.kroger.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.walmart.com/grocery* | Host | | Host permission — access limited to this URL pattern. |
| *://*.target.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.wholefoodsmarket.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.samsclub.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.costco.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.aldi.us/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.publix.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.heb.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.meijer.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.foodlion.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.stopandshop.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.giantfood.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.wincofoods.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.hy-vee.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.wegmans.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.sprouts.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.traderjoes.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.pigglywiggly.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.hannaford.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.bashas.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.smartandfinal.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.savemart.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.acmemarkets.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.haggen.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.randalls.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.tomthumb.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.shaws.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.starmarket.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.vons.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.pavilions.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.bakersplus.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.citymarket.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.dillons.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.food4less.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.fredmeyer.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.frysfood.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.gerbes.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.harristeeter.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.jaycfoods.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.kingsoopers.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.marianos.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.pay-less.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.qfc.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.ralphs.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.roundys.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.rulerfoods.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.smithsfoodanddrug.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.raleys.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.ajsfinefoods.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.luckysupermarkets.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.foodmaxx.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.maxxvaluefoods.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.staterbros.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.acmestores.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.amigosupermarkets.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.bigy.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.berkeleybowl.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.bristolfarms.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.brookshirebrothers.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.buehlers.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.centralmarket.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.crestfoodsok.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.cub.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.dagnyc.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.davesmarkets.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.dierbergs.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.erewhonmarket.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.fairwaymarket.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.festfoods.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.foodbazaar.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.yourfoodtown.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.foodaramatexas.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.foodland.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.gelsons.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.gristedes.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.heinens.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.homelandstores.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.houchensindustries.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.gohugos.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.jewelosco.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.keyfood.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.kingkullen.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.lowesmarket.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.lundsandbyerlys.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.marcs.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.marketbasketfoods.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.marketofchoice.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.mortonwilliams.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.mothersmarket.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.newseasonsmarket.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.nuggetmarket.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.pueblo.net/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.rednersmarkets.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.shopridleys.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.riesbeckfoods.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.rochebros.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.rosauers.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.rouses.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.scolaristores.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.seabrafoods.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.sedanos.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.sendiks.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.shoppersfood.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.stewleonards.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.superafoods.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.superkingmarkets.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.thefreshmarket.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.vallartasupermarkets.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.westernbeef.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.woodmans-food.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.yokesfreshmarkets.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.99ranch.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.hmart.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.seafoodcity.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.lotteplaza.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.patelbros.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.elsupermarkets.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.northgatemarket.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.bravosupermarkets.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.supermercadosselectos.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.ctownsupermarkets.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.zionmarket.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.uwajimaya.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.mitsuwa.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.marukai.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.nijiya.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.lamichoacanameatmarket.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.fiestamart.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.groceryoutlet.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.lidl.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.savealot.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.freshthyme.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.naturalgrocers.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.indiabazaar.co/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.newindiabazar.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.subzibazaar.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.mygrandmart.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.gw-supermarket.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.skyfoodsupermarket.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.kammanfood.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.hksupermarket.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.gfsupermarket.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.galleriamarkets.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.labonitasupermarkets.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.laperlatapatia.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.superiorgrocers.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.islandpacificmarket.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.elahorro.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.losaltosranchmarket.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.ndmmarket.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.teloloapan.supermarket/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.amazon.com/groceries* | Host | | Host permission — access limited to this URL pattern. |
| *://*.instacart.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.freshdirect.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.doordash.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.ubereats.com/* | Host | | Host permission — access limited to this URL pattern. |
| *://*.grubhub.com/* | Host | | Host permission — access limited to this URL pattern. |
| Access to Sensitive Domains | Risk Factor | | This extension requests access to sensitive domains: *://*.walmart.com/grocery*, *://*.target.com/*, *://*.kingsoopers.com/*, *://*.bristolfarms.com/*, *://*.kingkullen.com/*, *://*.superkingmarkets.com/*, *://*.amazon.com/groceries* |