codex-x-desktop-manager

SUSPICIOUS. The skill’s config-editing purpose partly matches its file access, but it also promotes jailbreak-style prompt injection and third-party provider switching while handling auth/config files. Install trust is weakened by a publisher mismatch (ara.so vs personal GitHub repo) and Gatekeeper bypass guidance; there is no clear malicious payload or exfiltration, but the overall footprint is broader and riskier than a normal desktop manager.