codex-console-automation

High-risk skill. Its capabilities match its stated purpose, but that purpose is mass OpenAI account automation, token forwarding, and payment handling through third-party services. The indirect install provenance, disproportionate credential scope, and non-official token upload paths make this suspicious and unsafe; high security risk, but not enough evidence for confirmed malware.