codedrobe-theme-manager
Warn
Audited by Gen Agent Trust Hub on Jul 19, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: Multiple scripts (apply_theme.mjs, restore_theme.mjs, theme_library.mjs) use npx --yes @codedrobe/core@latest to download and execute code from the npm registry at runtime.- [EXTERNAL_DOWNLOADS]: The skill fetches theme catalogs and packages from https://www.codexskins.org/. Although it implements SHA-256 verification and domain restrictions, it relies on external infrastructure for core execution logic.- [COMMAND_EXECUTION]: On Windows, the skill executes PowerShell commands with the -ExecutionPolicy Bypass flag to run background scripts, which overrides the default system security settings for the duration of the task.- [COMMAND_EXECUTION]: The skill uses launchctl on macOS to create and manage persistent background tasks (org.codexskins.codedrobe.active), which maintains a watcher process across the session.- [COMMAND_EXECUTION]: The scripts invoke various system utilities like which, where.exe, and taskkill.exe to manage process state.- [DYNAMIC_EXECUTION]: The apply_theme.mjs script dynamically generates a PowerShell script (active-watch.ps1) at runtime and executes it as a detached process.
Audit Metadata