codex-auth-account-manager

SUSPICIOUS. The skill’s capabilities mostly match its purpose, but it requires highly sensitive auth-file access and token handling, forwards tokens through a third-party CLI to `chatgpt.com` backend endpoints, and recommends an additional third-party Codex fork. The install path is not overtly malicious and uses npm/public repos, but the trust chain and credential exposure are broader than ideal for an account-management helper.