codex-auth-helper-chrome-extension
Fail
Audited by Gen Agent Trust Hub on Jun 22, 2026
Risk Level: HIGHEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONDATA_EXFILTRATIONCREDENTIALS_UNSAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill directs users to clone a repository from an unverified third-party account (
github.com/zhishile/codex-auth-helper.git). This source is not associated with the skill author (Aradotso) or any established trusted organizations. - [REMOTE_CODE_EXECUTION]: By instructing users to use the 'Load unpacked' feature in Chrome's Developer mode, the skill enables the execution of arbitrary JavaScript from an external source. This code runs with permissions to access browser data and perform network operations.
- [DATA_EXFILTRATION]: The skill is specifically designed to harvest highly sensitive authentication tokens (
__Secure-next-auth.session-token) from thechatgpt.comdomain. There is no verification that the externally sourced code does not exfiltrate these tokens to a remote attacker-controlled server. - [CREDENTIALS_UNSAFE]: The skill targets credentials that provide persistent access to a user's account. It encourages storing these session tokens in local files like
auth.jsonor environment variables, which increases the attack surface for local credential theft.
Recommendations
- AI detected serious security threats
Audit Metadata