codedrobe-theme
Pass
Audited by Gen Agent Trust Hub on Jul 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill facilitates the execution of remote code by instructing the agent to run the vendor's command-line utility (@codedrobe/core) via package runners like npx or bunx.
- [COMMAND_EXECUTION]: Executes various shell commands through the codedrobe CLI to detect installed applications, capture DOM snapshots, and modify local application configurations in ~/.codex/config.toml.
- [EXTERNAL_DOWNLOADS]: Downloads the @codedrobe/core package from the npm registry at runtime if it is not already installed locally.
- [SAFE]: The skill documentation includes a comprehensive set of security guardrails, explicitly forbidding the modification of application binaries (app.asar), requiring loopback-only network binding for development protocols, and advising against the execution of untrusted scripts or the use of external CSS resources.
Audit Metadata