codedrobe-one-shot-theme

Warn

Audited by Gen Agent Trust Hub on Jul 19, 2026

Risk Level: MEDIUMEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill frequently fetches and executes the @codedrobe/core package from the NPM registry using the npx utility when local versions are not detected. While this appears to be a resource provided by the author, it introduces a dependency on remote code at runtime.
  • [COMMAND_EXECUTION]: The skill uses Python's subprocess and Node.js's child_process modules to execute various system commands, including discovery of installed applications and management of background tasks.
  • [PERSISTENCE_MECHANISMS]: On macOS, the script scripts/macos_apply_theme.py uses launchctl submit to register a background job. This is intended to run a theme 'watcher' process that survives application restarts, but it utilizes a standard persistence vector to do so.
  • [OBFUSCATION]: The Windows installation script scripts/windows_apply_theme.mjs uses Base64 encoding (via -EncodedCommand) to pass complex PowerShell logic to the system shell. This is a common technique for shell interoperability but qualifies as executable code obfuscation.
  • [DYNAMIC_EXECUTION]: On Windows, the helper script generates a local PowerShell script file (.ps1) at runtime within the user's %LOCALAPPDATA% directory and then executes it as a detached background process.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Jul 19, 2026, 03:33 AM
Security Audit — agent-trust-hub — codedrobe-one-shot-theme