codex-dream-skin-theme-injector

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The README instructs cloning and running code from a remote repository (git clone https://github.com/Fei-Away/Codex-Dream-Skin.git) which fetches remote code that is then executed as part of installation, so this is a runtime external dependency that executes remote code.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.90). The skill includes explicit instructions to run sudo to modify /etc/hosts and guidance to create elevated scheduled tasks / adjust execution policies, which instruct modifying system-level state and bypassing security controls.