workbuddy-theme-manager
Pass
Audited by Gen Agent Trust Hub on Jul 21, 2026
Risk Level: SAFECOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the node:child_process module to manage the Tencent WorkBuddy application lifecycle, including closing the app, launching it with specific debugging flags, and running detached background workers for theme injection.
- [REMOTE_CODE_EXECUTION]: The skill leverages the Chrome DevTools Protocol (CDP) to inject and evaluate JavaScript templates within the application's renderer processes to hot-swap theme styles and assets at runtime.
- [EXTERNAL_DOWNLOADS]: The instructions reference codex-theme-installer, an external utility from the same vendor (codexthemes), which is used for the initial acquisition of theme packages before conversion.
Audit Metadata