chatgpt-pro-coding-agent
Warn
Audited by Socket on Sep 3, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the skill's purpose matches its capabilities, but it expands trust to several external components and sends repository context through ChatGPT Web plus a tokenized public MCP connector. The main concern is not obvious malware; it is the combination of third-party tooling, public routing, and credential-like connector forwarding for a coding workflow that could expose sensitive code or access if any component is compromised.
Confidence: 88%Severity: 72%
Audit Metadata