codedrobe-theme
Pass
Audited by Gen Agent Trust Hub on Aug 10, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill documentation provides instructions to execute vendor tools using
npx --yes @codedrobe/core@latest, which involves downloading and running the latest package from the NPM registry. - [COMMAND_EXECUTION]: The agent is guided to use various CLI commands like
codedrobe applyandcodedrobe verifyto interact with application renderers, which requires executing shell commands that communicate with target application processes. - [EXTERNAL_DOWNLOADS]: The skill includes procedures for downloading theme packages from a centralized store using the
codedrobe theme downloadcommand, which fetches resources from an external registry. - [DATA_EXFILTRATION]: While the skill includes a
dom snapshottool for structural analysis, the documentation explicitly states that it is read-only and excludes sensitive data such as text, form inputs, and media to protect user privacy.
Audit Metadata