codex-auto-register

SUSPICIOUS. The skill’s behavior is internally coherent for bulk account registration, but that stated purpose itself is high-risk: it automates creation of third-party accounts, harvests/stores OAuth tokens and passwords, relies on temp email and proxies, and can forward token data to an unverifiable upload endpoint. No confirmed malware or hidden execution is shown, but the credential and token handling is disproportionate and risky.