codexplusplus-launcher
Fail
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: CRITICALREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONPERSISTENCEDYNAMIC_EXECUTIONCREDENTIALS_UNSAFE
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill downloads and installs code directly from an unverified GitHub repository (
github.com/BigPizzaV3/CodexPlusPlus), which is not a trusted organization or well-known service. - [DYNAMIC_EXECUTION]: It uses Chromium DevTools Protocol (CDP) to inject arbitrary JavaScript (
renderer-inject.js) into the host application's renderer process at runtime. - [PERSISTENCE]: The skill includes a 'Windows Auto-Watcher' feature (
watch-install) designed to persistently intercept and redirect application launches. - [PRIVILEGE_ESCALATION]: Installation instructions require administrative privileges (
sudo) on macOS and execute system-level hooks on Windows to monitor and modify process behavior. - [CREDENTIALS_UNSAFE]: The skill is designed to sync 'provider sessions' and directly accesses the application's main SQLite database (
state_5.sqlite), which contains sensitive session tokens and conversation history. - [COMMAND_EXECUTION]: The skill invokes multiple shell commands for installation (
pip install -e .), system configuration, and process management.
Recommendations
- AI detected serious security threats
Audit Metadata