Is Trellis Seller Extension safe?

Clean risk

Trellis Seller Extension sends its embedded OAuth client secret to GrowthVectors authentication endpoints.

When you log in or refresh a session, the extension posts a hardcoded Trellis OAuth client ID and client secret to GrowthVectors authentication endpoints. The login request also includes the user-entered OTP code, and refresh requests include the stored refresh token.

Trellisv0.0.27Chrome Web Store
0Risk
Who publishes it

Trellis Corporation - no other listings under this identity

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
Trellis
Declared legal entity
Trellis Corporation
Registered address
515 Legget Dr Suite 900, Ottawa, ON K2K 3G4, CA
Registered contact
Fahim Sheikh

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Where it sends data

Destinations our analysis observed Trellis Seller Extension contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • api.growthvectors.io

    Trellis Seller Extension sends data to api.growthvectors.io. No other extension we have analysed sends data here.

Updated 30 September 2026mfnnikclhbphfbkojdfoeccbfpjcbbdl