This is a legitimate AI text-summarizer extension whose data flows fully match its CWS-disclosed purpose. The single outbound POST (:113) goes to a Google Apps Script URL that is explicitly declared in host_permissions, sends only page text (capped at 5700 chars), a cleaned hostname+first-path-segment URL, and a language flag — all covered by the disclosed 'Website content' collection category. All innerHTML usage is confined to the extension's own side-panel UI (), never injected into visited pages. The permhash cluster has malware peers, the publisher is flagged as trusted, and the bundled manifest exactly matches the published manifest with no discrepancy. The ML model over-weighted broad-but-necessary permissions (scripting + all_urls) required for a page-content summarizer and flagged innerHTML templating in the extension's own panel as suspicious.