codedrobe-theme-manager

SUSPICIOUS: the skill’s theme-management purpose is plausible, but its trust chain is inconsistent. It relies on an unofficial theming ecosystem, uses a runtime path that appears to differ from upstream documentation, and executes an unpinned external CLI via `npx @latest`; however, it does not clearly seek credentials or exfiltrate user data.

Low-to-moderate risk for malicious behavior within this module: there’s no direct evidence of stealing data or executing arbitrary commands via eval/Function. It enforces HTTPS and codexskins.org host restrictions for both catalog/package URLs and validates theme IDs as safe slugs, and it verifies downloaded package SHA-256. However, a significant supply-chain/runtime risk exists: if 'codedrobe' is not present, it uses 'npx @codedrobe/core@latest' and executes it via spawnSync, which can download and run remote code at install time. Additionally, --catalog can point to any local file path (readFile), which could be abused in a local attack scenario.