yichen-chatgpt-web-research

Warn

Audited by Socket on Jul 20, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the purpose mostly matches the capability, and traffic is directed to the official ChatGPT website rather than a fake API gateway. However, the skill has a meaningful trust and scope issue because it loads unverified companion skills from a registry and then grants them control over the user's live signed-in browser session, with autonomous prompt submission and file-writing behavior.

Confidence: 84%Severity: 62%
Audit Metadata
Analyzed At
Jul 20, 2026, 01:40 PM
Package URL
pkg:socket/skills-sh/mcncarl%2Fyichen-skills%2Fyichen-chatgpt-web-research%2F@0be3b449a1b22e53d878419ba49ba137aa349e04a139384f32a65fc837a6819a
Security Audit — socket — yichen-chatgpt-web-research