codex-oauth-automation-extension

SUSPICIOUS: the skill’s footprint is coherent with OAuth/account automation, but that purpose itself is high-risk and unusually broad. The main concerns are publisher/source mismatch, unpacked-extension trust, persistent handling of passwords/OTPs, and autonomous repeated auth actions routed through a user-defined CPA panel.