Listening.com

The extension is developed by The Listening App Inc., which appears to be a legitimate company based on the professional domain names in the CSP. However, with only 2,000 users and 21 ratings, it has a relatively small user base. The 3.9-star rating suggests mixed user experiences. The extension connects to multiple legitimate services including Google APIs and AWS S3 buckets for text-to-speech functionality, indicating a genuine audio/reading service.

The combination of broad content script injection across all websites (*://*/*) with tabs permission creates significant privacy and security risks. The extension can access and potentially modify content on every website you visit, read sensitive information like passwords or personal data, and manipulate browser tabs. While the storage and activeTab permissions are reasonable for a listening/audio service, the tabs permission seems excessive unless the extension needs to manage multiple tabs for its functionality. The contextMenus permission, while medium-risk, adds another attack vector.

Given the high-risk permissions and broad website access, consider running this extension in a separate Chrome profile dedicated to non-sensitive browsing. Avoid using it while accessing banking, email, or other sensitive websites. Monitor the extension's behavior and disable it when not actively needed. Consider whether the functionality truly requires such extensive permissions, and look for alternative text-to-speech extensions with more limited permissions if available.