codex-theme-maker

Warn

Audited by Gen Agent Trust Hub on Jul 19, 2026

Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Fetches the awesome-codex-skins toolkit from the author's GitHub repository (github.com/Wangnov/awesome-codex-skins) to provide the CLI and runtime components required for theme creation.
  • [COMMAND_EXECUTION]: Executes multiple local scripts and system commands to manage the theme lifecycle:
  • Runs Node.js scripts (node bin/codex-theme.mjs) to start the theme engine, perform hot-reloads, and package skin files.
  • Invokes Python 3 scripts (normalize_alpha.py, verify-alpha.py, asset_contact_sheet.py) to process AI-generated images and perform strict alpha-channel validation.
  • Uses macOS system utilities (plutil, defaults) to extract version information and metadata from the target application's Info.plist.
  • Modifies the application's local configuration file at ~/.codex/config.toml to persist theme changes.
  • [REMOTE_CODE_EXECUTION]: Employs the Chrome DevTools Protocol (CDP) to perform runtime process injection. It dynamically inserts generated CSS styles and HTML structures (chrome.html) into the memory space of the running Codex desktop application (com.openai.codex).
Audit Metadata
Risk Level
MEDIUM
Analyzed
Jul 19, 2026, 09:03 AM
Security Audit — agent-trust-hub — codex-theme-maker