workbuddy-theme-manager

This module is a powerful local injection tool that connects to a desktop app’s Chromium DevTools endpoint and injects/evaluates JavaScript derived from theme packages using Runtime.evaluate and Page.addScriptToEvaluateOnNewDocument. There is no direct evidence in the snippet of malware-like network exfiltration or credential theft, but the design can enable arbitrary code execution in the target renderer if an attacker controls the theme input or tampers with local state. Treat untrusted themes/state as unsafe and restrict where packages come from.