skills/aradotso/codex-skills/codex2api-reverse-proxy/Socket

codex2api-reverse-proxy

Warn

Audited by Socket on May 16, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS. The skill is internally coherent as documentation for a credential-heavy reverse proxy, but it concentrates refresh/access tokens and API traffic in a local gateway and installs from a personal GitHub account unrelated to the stated skill publisher. The main concern is supply-chain trust plus disproportionate secret concentration, not confirmed malware.

Confidence: 89%Severity: 72%

Audit Metadata

Analyzed At

May 16, 2026, 10:51 PM

Package URL

pkg:socket/skills-sh/Aradotso%2Fcodex-skills%2Fcodex2api-reverse-proxy%2F@e11fcd96f19aa6fb209ae1c3121d68a4f65e1d29