| cookies | Permission | | This permission provides full access to read and modify browser cookies. Rated High because it can steal session tokens, modify authentication cookies, and compromise accounts across websites. |
| Contextual Risk Factors | Risk Factor | | The following context increases the overall risk:
• 19% increase: Access to sensitive domains increases potential impact |
| storage | Permission | | This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads. |
| activeTab | Permission | | This permission grants temporary access to the current tab. Rated Medium because it can access current page content when invoked, though limited to user-initiated actions. |
| tabs | Permission | | This permission enables tab management and monitoring. Rated Medium because it can track open tabs, access tab metadata, and monitor user browsing patterns. |
| https://*.cloudforce.com/* | Host | | Host permission — access limited to this URL pattern. |
| https://*.cloudforce.mil/* | Host | | Host permission — access limited to this URL pattern. |
| https://*.crmforce.mil/* | Host | | Host permission — access limited to this URL pattern. |
| https://*.force.com/* | Host | | Host permission — access limited to this URL pattern. |
| https://*.lightning.force.com/* | Host | | Host permission — access limited to this URL pattern. |
| https://*.lightning.force.mil/* | Host | | Host permission — access limited to this URL pattern. |
| https://*.my.salesforce.com/* | Host | | Host permission — access limited to this URL pattern. |
| https://*.my.salesforce-setup.com/* | Host | | Host permission — access limited to this URL pattern. |
| https://*.salesforce-setup.com/* | Host | | Host permission — access limited to this URL pattern. |
| https://*.salesforce.com/* | Host | | Host permission — access limited to this URL pattern. |
| https://*.salesforce.mil/* | Host | | Host permission — access limited to this URL pattern. |
| https://*.sfcrmapps.cn/* | Host | | Host permission — access limited to this URL pattern. |
| https://*.sfcrmproducts.cn/* | Host | | Host permission — access limited to this URL pattern. |
| https://*.vf.force.mil/* | Host | | Host permission — access limited to this URL pattern. |
| https://*.visual.force.mil/* | Host | | Host permission — access limited to this URL pattern. |
| https://*.visualforce.com/* | Host | | Host permission — access limited to this URL pattern. |
| https://*.visualforce.mil/* | Host | | Host permission — access limited to this URL pattern. |
| Access to Sensitive Domains | Risk Factor | | This extension requests access to sensitive domains: https://*.lightning.force.com/*, https://*.lightning.force.mil/* |
| sidePanel | Permission | | This permission adds custom panels to the browser interface. Rated Low because it only affects browser UI elements and cannot access page content. |