cookie-copy
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFEDATA_EXFILTRATIONCOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [DATA_EXFILTRATION]: The skill accesses sensitive local Chrome cookie databases (e.g.,
~/Library/Application Support/Google/Chrome/Default/Cookies) and performs SQLite operations to copy encrypted session data between profiles. This is the primary function of the skill and is performed locally without external transmission. - [COMMAND_EXECUTION]: The scripts execute local system commands including
psto check for running browser processes and/usr/sbin/scutilto retrieve system proxy settings. It also spawns the Google Chrome binary with isolated profile arguments to verify authenticated sessions. - [DYNAMIC_EXECUTION]: The verification script uses the Chrome DevTools Protocol (CDP) and
Runtime.evaluateto execute JavaScript code within the browser context. This is used to programmatically verify the authenticated user's email address on the ChatGPT website.
Audit Metadata