chatgpt-pro-coding-agent

Warn

Audited by Socket on Sep 3, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill's purpose matches its capabilities, but it expands trust to several external components and sends repository context through ChatGPT Web plus a tokenized public MCP connector. The main concern is not obvious malware; it is the combination of third-party tooling, public routing, and credential-like connector forwarding for a coding workflow that could expose sensitive code or access if any component is compromised.

Confidence: 88%Severity: 72%
Audit Metadata
Analyzed At
Sep 3, 2026, 04:43 AM
Package URL
pkg:socket/skills-sh/tentenco%2Fskills%2Fchatgpt-pro-coding-agent%2F@35d021aa6a2ed17493e4826f82c4c60925dbfce2d7a267d232707141c082e059