chatgpt-web-research

Warn

Audited by Socket on Jun 24, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The core behavior is mostly aligned with its stated purpose and sends data to the official ChatGPT website, but it carries meaningful risk because it operates an authenticated browser session, extracts content via clipboard/DOM, and depends on two unreviewed transitive skills with broad browser-control capability.

Confidence: 85%Severity: 54%
Audit Metadata
Analyzed At
Jun 24, 2026, 07:31 AM
Package URL
pkg:socket/skills-sh/bear2u%2Fmy-skills%2Fchatgpt-web-research%2F@3415949d32404e5d8617359a88b9c7aa8369985519b20a82b300d2572220fe50
Security Audit — socket — chatgpt-web-research