yichen-codex-chatgpt

SUSPICIOUS. The stated purpose mostly matches the capabilities: browser-mediated ChatGPT research/review plus read-only local project exposure is coherent. The main issue is install and data-flow trust: the core tunnel/MCP runtime is an external, user-supplied component with no verifiable source or release trail here, yet it brokers local code to ChatGPT and may optionally expand to write-capable modes. That makes the skill high-risk even without clear malicious intent.