All network communication in the reviewed source goes exclusively to the publisher's own backend ([domain withheld]) to fetch dealer vehicle listing data; no user browsing data, credentials, or page content is exfiltrated to any third party. The broad *://* host permissions are required to inject the auto-fill content script into [domain withheld] pages and to fetch vehicle images from arbitrary CDN URLs. The IP address appears in the manifest host_permissions but is unreferenced in any script — likely a entry. The ML model was most likely driven by the combination of broad host permissions, large bundle size with a React+Parcel runtime, and image-processing code containing patterns that are actually JPEG EXIF injection used to vary photos between postings (a Facebook TOS concern, not a user security issue). Publisher reputation is clean ( malicious extensions), and the extension's code matches its stated purpose exactly.