skills/tttnny/my-agent-skills/codex-hybrid-login/Socket

codex-hybrid-login

Warn

Audited by Socket on Jul 30, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the core purpose is plausible, but the skill collects SSH passwords via sshpass and allows Codex OAuth/API configuration to point at an arbitrary custom endpoint, creating meaningful credential-routing risk. The missing referenced workflow files prevent verification of exact commands, so overall risk is medium-high rather than benign.

Confidence: 85%Severity: 76%

Audit Metadata

Analyzed At

Jul 30, 2026, 07:35 AM

Package URL

pkg:socket/skills-sh/tttnny%2Fmy-agent-skills%2Fcodex-hybrid-login%2F@bf842234fbd1215c9088b11103800ba0e054ab15166a8261c9ea8e461f8e879d