chatgpt-subscription-guide

Warn

Audited by Socket on Jul 14, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill’s stated purpose is subscription guidance, but its actual footprint heavily promotes a non-official intermediary and routes potentially sensitive account/session data through third-party domains rather than official OpenAI billing flows. There is no malware-like executable payload, but the data-flow and trust model are not proportionate to a benign help guide.

Confidence: 90%Severity: 78%
Audit Metadata
Analyzed At
Jul 14, 2026, 06:30 PM
Package URL
pkg:socket/skills-sh/Aradotso%2Fcodex-skills%2Fchatgpt-subscription-guide%2F@e4d39beca442ff23e0184ed46fe80db16e23bf5152404f5ca476fa87e3443547
Security Audit — socket — chatgpt-subscription-guide