skills/yigitkonur/skills-by-yigitkonur/run-codex-bridge/Socket

run-codex-bridge

Warn

Audited by Socket on Apr 22, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the skill’s purpose is coherent, but its trust model is weak because it asks the agent to install and rely on a third-party codex-worker CLI via curl|bash from a personal GitHub publisher. The main risk is supply-chain and opaque credential/data handling inside the external tool, not obvious malicious instructions in the skill itself.

Confidence: 84%Severity: 80%

Audit Metadata

Analyzed At

Apr 22, 2026, 10:55 AM

Package URL

pkg:socket/skills-sh/yigitkonur%2Fskills-by-yigitkonur%2Frun-codex-bridge%2F@02218465ca11f1aa2bbe6a123c5dd031d968dbfc