The source code is a coherent, well-structured trading automation extension that connects to Lemonn's signal WebSocket ([domain withheld]), reads the user's active broker session to place orders on their behalf (zerodha, dhan, upstox, groww), and reports those orders back to Bolt's own backend ([domain withheld] — the publisher's infrastructure, explicitly declared in the bundled manifest host_permissions). All network destinations are either first-party ([domain withheld], [domain withheld]) or the broker platforms the extension automates, which is precisely what the CWS listing describes. One genuine concern: the bundled manifest includes `"offscreen"` permission and `"[domain withheld]"` host_permission that are absent from the published CWS manifest summary; however, offscreen is provably used only for audio playback of signal sounds ( plays strategy_start_animation_sound.mp3) and [domain withheld] is demonstrably the publisher's own order-tracking backend — neither represents a covert capability. The ML model over-fit on a large, network-heavy trading UI extension rather than detecting genuine malice.