codex-chatgpt-web-integration

Warn

Audited by Socket on Sep 16, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill's functionality broadly matches its purpose, but it is an unofficial third-party bridge that intercepts Codex context, uses browser automation against ChatGPT Web, and optionally forwards tool access through OpenAI tunnels. The install path is same-project and documented, reducing malware certainty, but remote-script installation plus handling of ChatGPT session data and OpenAI credentials makes the security risk medium-to-high for practical use.

Confidence: 89%Severity: 68%
Audit Metadata
Analyzed At
Sep 16, 2026, 03:58 AM
Package URL
pkg:socket/skills-sh/reason-machines%2Fcodex-skills%2Fcodex-chatgpt-web-integration%2F@a605fff3604b59846883e1828edd66516f4bfb9f86eeecf262b050efafd67e24