tibo-reset-codex

SUSPICIOUS. The skill’s overall purpose is plausible, but its footprint is much broader than a simple reset-monitoring guide: it reads local auth/session files, manipulates browser login state, may inspect account-manager databases, and can depend on private-message tooling. Data flows are not overtly malicious and there is no confirmed credential exfiltration, but the reliance on unofficial third-party sources plus sensitive local account access makes the skill medium-high risk and over-scoped for its stated monitoring role.

This is a local Chrome-profile migration utility specifically designed to copy Google authentication cookies. It is security-sensitive because browser cookies can function as session credentials, and it may overwrite destination records, but the provided code contains no evident malicious payload, exfiltration, persistence, destructive behavior, or obfuscation. Use should be limited to an authorized user on the same machine.