codedrobe-theme

Pass

Audited by Gen Agent Trust Hub on Aug 10, 2026

Risk Level: SAFEREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [REMOTE_CODE_EXECUTION]: The skill documentation provides instructions to execute vendor tools using npx --yes @codedrobe/core@latest, which involves downloading and running the latest package from the NPM registry.
  • [COMMAND_EXECUTION]: The agent is guided to use various CLI commands like codedrobe apply and codedrobe verify to interact with application renderers, which requires executing shell commands that communicate with target application processes.
  • [EXTERNAL_DOWNLOADS]: The skill includes procedures for downloading theme packages from a centralized store using the codedrobe theme download command, which fetches resources from an external registry.
  • [DATA_EXFILTRATION]: While the skill includes a dom snapshot tool for structural analysis, the documentation explicitly states that it is read-only and excludes sensitive data such as text, form inputs, and media to protect user privacy.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 10, 2026, 01:44 AM
Security Audit — agent-trust-hub — codedrobe-theme