| Contextual Risk Factors | Risk Factor | | The following context increases the overall risk:• 20% increase: Access to sensitive domains increases potential impact• 10% increase: Early script execution enables pre-emptive content manipulation |
| storage | Permission | | This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads. |
| activeTab | Permission | | This permission grants temporary access to the current tab. Rated Medium because it can access current page content when invoked, though limited to user-initiated actions. |
| tabs | Permission | | This permission enables tab management and monitoring. Rated Medium because it can track open tabs, access tab metadata, and monitor user browsing patterns. |
| https://arxiv.org/* | Host | | Host permission — access limited to this URL pattern. |
| https://www.arxiv.org/* | Host | | Host permission — access limited to this URL pattern. |
| https://pmc.ncbi.nlm.nih.gov/* | Host | | Host permission — access limited to this URL pattern. |
| https://www.ncbi.nlm.nih.gov/* | Host | | Host permission — access limited to this URL pattern. |
| https://www.biorxiv.org/* | Host | | Host permission — access limited to this URL pattern. |
| https://www.medrxiv.org/* | Host | | Host permission — access limited to this URL pattern. |
| https://elifesciences.org/* | Host | | Host permission — access limited to this URL pattern. |
| https://f1000research.com/* | Host | | Host permission — access limited to this URL pattern. |
| https://scholar.google.com/* | Host | | Host permission — access limited to this URL pattern. |
| https://paperverse.science/* | Host | | Host permission — access limited to this URL pattern. |
| https://tomesphere.com/* | Host | | Host permission — access limited to this URL pattern. |
| https://www.tomesphere.com/* | Host | | Host permission — access limited to this URL pattern. |
| Access to Sensitive Domains | Risk Factor | | This extension requests access to sensitive domains: https://scholar.google.com/* |
| Early Content Script Execution | Risk Factor | | This extension runs content scripts at document_start. |
| sidePanel | Permission | | This permission adds custom panels to the browser interface. Rated Low because it only affects browser UI elements and cannot access page content. |