skills/reason-machines/codex-skills/codex-chatgpt-web-integration/Socket

codex-chatgpt-web-integration

Warn

Audited by Socket on Aug 4, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the overall capability is coherent for a ChatGPT-Web bridge, but the trust model is weak. Main concerns are mutable pipe-to-shell installers, publisher/artifact mismatch, sensitive context forwarding to ChatGPT Web, and optional MCP tool execution with auto-approval.

Confidence: 86%Severity: 74%

Audit Metadata

Analyzed At

Aug 4, 2026, 07:12 AM

Package URL

pkg:socket/skills-sh/Aradotso%2Fcodex-skills%2Fcodex-chatgpt-web-integration%2F@a605fff3604b59846883e1828edd66516f4bfb9f86eeecf262b050efafd67e24