codedrobe-theme

SUSPICIOUS. The skill’s theming capabilities are broadly aligned with its stated purpose and its guardrails are sensible, but its core dependency is an external CLI whose provenance is not verifiable from the provided content. That unresolved supply-chain trust issue is the main driver of risk; there is no clear evidence of credential theft, exfiltration, or hidden malicious behavior in the visible instructions.