Security audit of mvanhorn/agentcookie · Codex Skill by mvanhorn · ★ 849
Yes — agentcookie passed AgentSkillsHub's rule-based security scan with no dangerous patterns detected. As with any third-party skill, confirm what credentials it requests before production use.
What it is: Your agent runs on a Mac that isn't your daily driver. agentcookie keeps its sessions in sync with the Mac you actually browse on, continuously, encrypted over Tailscale, so OpenClaw, Hermes, or any other agent runtime wakes up authenticated. macOS, peer-to-peer, no cloud middleman.
sudo usage| Security grade | ✓ SAFE |
| Quality score | 71/100 |
| GitHub stars | 849 |
| Language | Go |
| License | MIT |
| Last updated |
Browse all Codex Skill skills →
This is AgentSkillsHub's free basic audit: an automated rule-based scan with 42 published rules built on SlowMist's agent-security taxonomy (credential theft, obfuscated payloads, privilege escalation, covert instructions to the agent, and more) across 186,000+ open-source AI agent skills and MCP servers, refreshed every 8 hours. A SAFE grade is a scan result, not a guarantee — deep 5-dimension audits (code · credentials · vendor · supply-chain · operational) are available for enterprise. Audited: 2026-10-23.