codex-skin-pack-installer
Pass
Audited by Gen Agent Trust Hub on Jul 23, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads theme assets (ZIP files containing JSON and images) from the author's public GitHub repository (
github.com/ChannelerH/codex-skin-packs). This is a legitimate function for a theme installer. - [COMMAND_EXECUTION]: The skill utilizes a Python script to manage theme packs. The script includes critical security features:
- ZipSlip Protection: The
safe_extractfunction validates that all extracted files remain within the target directory, preventing path traversal attacks. - Input Validation: Theme 'slugs' are checked against a hardcoded whitelist, preventing arbitrary directory creation or deletion.
- Sanitized Execution: It operates within the user's home directory (
~/.codexthemes/packs) and avoids modifying sensitive system files or application bundles. - [PROMPT_INJECTION]: The skill instructions include safety rules that explicitly forbid the agent from performing dangerous actions, such as uploading private screenshots or patching signed application bundles.
Audit Metadata