Build from the uploaded sources zip:
1. Install Node.js (version in .nvmrc) and pnpm 10.12.1.
2. Run: pnpm install --frozen-lockfile && pnpm build:firefox
3. Output: apps/extension/.output/firefox-mv3 (matches the uploaded package).

The innerHTML warnings come from the bundled React DOM library (chunks/globals-*.js), not from extension code. PunyGuard never assigns page or user content to innerHTML.

To test: open any page that links to xn--mzn-5cdb9f.com (it displays as "amazon.com" with Cyrillic letters). The toolbar badge turns red and the popup lists the domain. No account is needed. All analysis is local; the add-on makes no network requests and collects no data.