Is Nimbus Screen Capture: Screenshot, Edit, Annotate safe?

Nimbus Screen Capture embeds hardcoded OAuth secrets for Slack and Google and transmits a browser fingerprint to its vendor server.

The extension includes literal Slack and Google OAuth client_secret values in background.js, allowing anyone who unpacks the extension to impersonate the Nimbus app and complete OAuth token exchanges against Slack and Google APIs. On first run, the extension uses FingerprintJS2 to compute a hardware fingerprint from ~20 browser signals, stores it in localStorage, and transmits it to capture-pro.everhelper.me each time the user checks their premium status.