codex-chatgpt-web-integration
Warn
Audited by Socket on Sep 16, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill's functionality broadly matches its purpose, but it is an unofficial third-party bridge that intercepts Codex context, uses browser automation against ChatGPT Web, and optionally forwards tool access through OpenAI tunnels. The install path is same-project and documented, reducing malware certainty, but remote-script installation plus handling of ChatGPT session data and OpenAI credentials makes the security risk medium-to-high for practical use.
Confidence: 89%Severity: 68%
Audit Metadata