yichen-codex-chatgpt

SUSPICIOUS. The skill’s high-level purpose is coherent, and several safeguards are present, but it routes local project content through an incompletely specified tunnel/private-App path and combines untrusted web/LLM input with local code execution. Main concern is data-flow and prompt-injection exposure, not confirmed malware.