codex-dream-skin-theme-injector

Suspicious but not malicious. The skill’s CDP injection behavior fits its stated theming purpose and data stays local, but the trust chain is weak because the install source does not clearly match the stated publisher, and the instructions expand attack surface by enabling remote debugging, execution-policy bypasses, and optional persistence.