It does not require any permissions by default. It's a bug in the way Mozilla detects the optional permissions inside the extension's manifest file. Those permissions are optional and they still require a user consent, meaning I cannot enable them in the background to access your data on all sites without you knowing about it. Plus the extension only looks for markdown files, the source code is not GitHub ..