chatgpt-search
Warn
Audited by Socket on Apr 13, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the scraping capability matches the stated purpose, but the method is over-scoped. The key issue is copying the user's real Chrome profile into a remote-debuggable browser and then intercepting/storing ChatGPT page, API, and hydration data. There is no clear malware payload or untrusted installer, but the credential/session exposure and broad data capture make this a high-risk skill.
Confidence: 86%Severity: 78%
Audit Metadata