chatgpt-search

Warn

Audited by Socket on Apr 13, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the scraping capability matches the stated purpose, but the method is over-scoped. The key issue is copying the user's real Chrome profile into a remote-debuggable browser and then intercepting/storing ChatGPT page, API, and hydration data. There is no clear malware payload or untrusted installer, but the credential/session exposure and broad data capture make this a high-risk skill.

Confidence: 86%Severity: 78%
Audit Metadata
Analyzed At
Apr 13, 2026, 04:18 AM
Package URL
pkg:socket/skills-sh/SeifBenayed%2Fclaude-code-sdk%2Fchatgpt-search%2F@8d44acc94a6a95b175faecd25b7a5fe846e34a8e
Security Audit — socket — chatgpt-search