Tally

The bundled manifest declares https://api.callwithtally.com/* and https://api.agentsatlas.io/* as host_permissions, but both are absent from the CWS-published manifest summary. The installed extension silently holds fetch() access to these domains beyond what is disclosed in the store; api.agentsatlas.io specifically backs the Instagram automation pipeline, which is unrelated to the declared dial-assist purpose. A host_permissions expansion that bypasses the normal CWS review signal is itself a red flag.

{  "host_permissions": [    "http://localhost:3001/*",    "http://localhost:3002/*",    "http://localhost:5001/*",    "https://api.callwithtally.com/*",    "https://api.agentsatlas.io/*",    "https://intense-dusk-79330-68ded9c767c7.herokuapp.com/*",    "https://atlas-celest-backend-3bb2fea96236.herokuapp.com/*",    "*://mobile.impact.ailife.com/*",    "*://sso.globelifeinc.com/*",    "*://sso.ailife.com/*"  ]}

A complete Instagram automation bot (igBackground.js, igContent.js, igAthleteFinder.js, igRosterScraper.js) is present in the installed bundle. Although currently inert—the importScripts lines in backgroundWrapper.js are commented out and igContent.js is not listed in manifest content_scripts—the system is architecturally complete: it polls atlas-celest-backend-3bb2fea96236.herokuapp.com for tasks, autonomously follows/DMs/story-likes Instagram users, scrapes public profile bios and follower counts, and exfiltrates discovered Instagram handles to that same backend. A single un-comment in backgroundWrapper.js would activate it. The developer's own comment states 'strip these + the scripting/tabs permissions and the IG content_scripts entry before publishing to the Chrome Web Store,' confirming the code was inadvertently shipped.

async function igSubmitDiscovery(source, sourceDetail, usernames) {  try {    const data = await igFetch('/instagram/agent/discovery', {      method: 'POST',      body: JSON.stringify({        source,        source_detail: sourceDetail,        usernames      })    });    console.log(`[IG Background] Discovery: submitted ${usernames.length}, inserted ${data.inserted}`);    return data;  } catch (e) {    console.error('[IG Background] Discovery failed:', e.message);    return null;  }}