heige-codex-skin-studio
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONPERSISTENCE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses various shell scripts (
.commandand.bat) to manage the application lifecycle, such as forcing Codex to restart with the--restartflag to re-initialize the debugging port. - [PERSISTENCE]: To maintain theme settings across reboots, the skill creates standard system persistence markers: a macOS LaunchAgent (
com.heigeai.codex-skin-controller.plist) and a Windows Scheduled Task (HeiGeAI_CodexSkinController). These are documented as part of the primary skill purpose. - [DYNAMIC_EXECUTION]: Themes are applied by injecting CSS strings into the Codex application instance via
Runtime.evaluateover the Chrome DevTools Protocol (CDP) on127.0.0.1:9341. This is the intended mechanism for theming without binary modification.
Audit Metadata