The extension is a full-featured video downloader whose code does exactly what the listing claims: it intercepts streaming requests (webRequest), reads video metadata from page context (), patches on TikTok and Vimeo to capture stream URLs, downloads segments with authenticated cookies ( handlers restricted to the page's own origin), and transcodes via locally-bundled libav WASM in an offscreen document. A Google Analytics Measurement Protocol endpoint is present (:10943, G-93D5G9V9ZJ) but is dead code: the guard function Uu() at line 10975 unconditionally returns true, making!Uu() always false and short-circuiting the analytics call rr() at every invocation — no telemetry is ever dispatched. One manifest discrepancy was found: the CWS-published manifest lists cookies as a required permission, but the bundled manifest omits it, meaning the installed extension is MORE restrictive than the CWS listing, not less; the code guards cookie access with chrome.permissions.contains({permissions:["cookies"]}) so it degrades gracefully. The permhash cluster has 0% malware hits, publisher reputation is low-risk, and the ML score of 0.07 is low — all corroborating benign classification.