abai-autoplus-chatgpt-registration

Warn

Audited by Socket on Oct 8, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill’s footprint is not a normal developer-assistance integration: it is explicitly built for mass account creation, OAuth bypass, proxy/fingerprint evasion, and credential-heavy automation. The strongest risk is supply-chain trust: users are told to clone and run a personal GitHub repository unrelated to the skill publisher instead of a clearly official release path. While there is no confirmed credential exfiltration endpoint or hidden payload in the provided text, the combination of unverifiable installer provenance, broad credential intake, and abuse-oriented purpose makes this a high-risk skill.

Confidence: 93%Severity: 88%
Audit Metadata
Analyzed At
Oct 8, 2026, 11:40 PM
Package URL
pkg:socket/skills-sh/reason-machines%2Fai-agent-skills%2Fabai-autoplus-chatgpt-registration%2F@e76877e161fd51033763182523af5b201cd366cd1e46c7e2c9f5447680f76f0f