codex-theme-switcher
Pass
Audited by Gen Agent Trust Hub on Jul 19, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes platform-specific commands (such as
taskkill,powershell,osascript,open, andpgrep) to manage the lifecycle of the Codex/ChatGPT application. These commands are used to restart the application with the necessary debugging flags required for the skill to function. - [DATA_EXFILTRATION]: Analysis confirmed no data exfiltration occurs. Network operations are strictly limited to the local loopback interface (127.0.0.1) to facilitate communication between the skill's scripts and the application's debugging endpoint.
- [REMOTE_CODE_EXECUTION]: The skill uses the Chrome DevTools Protocol to inject and execute styling scripts within the local Codex application context. This is the core mechanism for applying themes and is restricted to the local environment.
- [EXTERNAL_DOWNLOADS]: The skill uses
npxto execute its internal TypeScript scripts. It does not perform any unauthorized remote downloads; all theme assets are managed within the user's local directory. - [SAFE]: The skill implements best practices for local tool development, including path validation to prevent directory traversal and a structured feedback loop to ensure the user is aware of application restarts.
Audit Metadata