skills/aradotso/codex-skills/opencodex-gateway/Socket

opencodex-gateway

Warn

Audited by Socket on Jun 13, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill’s capabilities mostly match its stated gateway purpose, but it is a high-trust local MITM for prompts, API keys, and screenshots, with added macOS control. The main concern is provenance mismatch between the skill publisher and the GitHub repo being installed, plus the broad local-control and credential-handling footprint.

Confidence: 100%Severity: 60%

Audit Metadata

Analyzed At

Jun 13, 2026, 12:04 AM

Package URL

pkg:socket/skills-sh/Aradotso%2Fcodex-skills%2Fopencodex-gateway%2F@02a85107618f9f7deb6229b7059cd59e7f4e7b9d1b51aa29795569cfa1333cbc