The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill instructs the user to download a Chrome extension from a third-party GitHub repository: https://github.com/QLHazyCoder/codex-oauth-automation-extension.git. This source is not verified or managed by a trusted organization.
[COMMAND_EXECUTION]: The installation process requires the user to execute shell commands (git clone, cd) to retrieve the external code.
[PRIVILEGE_ESCALATION]: The extension utilizes the chrome.debugger API, as evidenced by the chrome.debugger.attach and Input.dispatchMouseEvent calls in the documentation. This API allows the extension to bypass typical browser security boundaries (like the Content Security Policy) and simulate human interactions to click buttons that might otherwise be protected.
[DATA_EXFILTRATION]: The extension is designed to extract sensitive OAuth data, including authorization URLs and callback parameters (code and state), and transmit them to a remote 'CPA panel' (cpaUrl). The automation of OpenAI account registration involves the handling of email addresses, passwords, and verification codes, all of which are managed and potentially stored by the extension and its associated backend panel.

codex-oauth-automation-extension