codedrobe-one-shot-theme
Warn
Audited by Gen Agent Trust Hub on Jul 19, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill frequently fetches and executes the
@codedrobe/corepackage from the NPM registry using thenpxutility when local versions are not detected. While this appears to be a resource provided by the author, it introduces a dependency on remote code at runtime. - [COMMAND_EXECUTION]: The skill uses Python's
subprocessand Node.js'schild_processmodules to execute various system commands, including discovery of installed applications and management of background tasks. - [PERSISTENCE_MECHANISMS]: On macOS, the script
scripts/macos_apply_theme.pyuseslaunchctl submitto register a background job. This is intended to run a theme 'watcher' process that survives application restarts, but it utilizes a standard persistence vector to do so. - [OBFUSCATION]: The Windows installation script
scripts/windows_apply_theme.mjsuses Base64 encoding (via-EncodedCommand) to pass complex PowerShell logic to the system shell. This is a common technique for shell interoperability but qualifies as executable code obfuscation. - [DYNAMIC_EXECUTION]: On Windows, the helper script generates a local PowerShell script file (
.ps1) at runtime within the user's%LOCALAPPDATA%directory and then executes it as a detached background process.
Audit Metadata