codex-plusplus-tweak-system

SUSPICIOUS. The core capability—patching Codex to load tweaks with full renderer privileges—is consistent with the stated purpose, but the install path is high risk: remote script execution from a different publisher identity, mutable GitHub sources, and automatic fetching of default tweaks. The skill does not show direct credential theft or off-purpose exfiltration, but its supply-chain and execution footprint is broader and riskier than a normal documentation skill.