The Agent Skills Directory

[COMMAND_EXECUTION]: The skill uses node:child_process in scripts/apply-theme.ts to execute system-level commands like taskkill on Windows and osascript on macOS. These commands are used to gracefully restart the target application (Codex/ChatGPT) with debugging flags enabled.
[REMOTE_CODE_EXECUTION]: The apply-theme.ts and qa-contrast.ts scripts utilize the Chrome DevTools Protocol (CDP) via WebSockets to inject and evaluate JavaScript within the target application's renderer process. This functionality is the primary mechanism for the skill's theme injection and visual verification features.
[SAFE]: The skill implements significant security controls, including path traversal validation in scripts/apply-theme.ts and scripts/export-theme.ts, ensuring file operations are restricted to the managed ~/.codexthemes directory.
[SAFE]: scripts/validate-theme.ts performs static analysis on generated CSS to prevent the inclusion of external resources, executable JS expressions, or unauthorized network requests within the stylesheets.
[SAFE]: Network operations are restricted to the local loopback address (127.0.0.1) for communication with the application's debugging endpoint.

codex-theme-creator