The extension contains a single 6-line content script () that calls stopImmediatePropagation() on visibilitychange and webkitvisibilitychange events — exactly what is needed to prevent Twitch from detecting tab switches and downgrading stream quality. The manifest limits execution to *.[domain withheld] only, no permissions are declared beyond this content script injection, and there is zero network activity, data collection, or code execution beyond intercepting the two DOM events. The ML score of 0.47 is almost certainly driven by the low file count and small JS size rather than any actual malicious pattern; our own risk engine scored it 0.00 with zero findings, corroborating the false-positive conclusion.