codex-plusplus-tweak-system

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.90). The package links point to raw GitHub scripts (install.sh / install.ps1) that the instructions explicitly pipe to bash/PowerShell and a short domain (ara.so) for the project — running remote installer scripts that patch and re-sign a local app grants high privileges and is a high-risk, untrusted distribution vector unless you fully verify the repository and site.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). This skill fetches and executes public third-party code (the installer uses curl|bash from raw.githubusercontent.com and the runtime "installs default tweaks from GitHub releases" and checks each tweak's githubRepo on GitHub), so untrusted user-generated tweak code can be ingested and executed and thus could supply instructions that influence behavior.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.80). The skill instructs patching and re-signing a locally installed application (modifying app.asar and installing watchers), and even suggests running remote install scripts (curl|bash, PowerShell | iex), which actively change the host application files and can compromise system state.