skills/aradotso/codex-skills/codex-candy-eval-benchmark/Socket

codex-candy-eval-benchmark

Warn

Audited by Socket on Jun 29, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The skill’s functionality is coherent for a Codex benchmarking tool and its data flow appears to stay within the official Codex/OpenAI path, but install provenance is weaker than the branding suggests because it clones unpinned source from an unrelated personal GitHub repo with no release/checksum trail.

Confidence: 87%Severity: 56%

Audit Metadata

Analyzed At

Jun 29, 2026, 05:08 AM

Package URL

pkg:socket/skills-sh/Aradotso%2Fcodex-skills%2Fcodex-candy-eval-benchmark%2F@72047662054da8851a2b9bd0a999673f8d69b11cae822d2618a6c28568b4b06d