skincraft-codex
v1.0.0
Published
SkinCraft: a safe, reversible theme installer for Codex Desktop.
Readme
SkinCraft CLI
The open-source macOS installer and recovery agent for SkinCraft. It applies signed, controlled visual theme packages without modifying the ChatGPT/Codex application bundle or its code signature.
SkinCraft is independent and is not affiliated with or endorsed by OpenAI.
Commands
npx -y [email protected] apply theme_example
npx -y [email protected] apply theme_example --token install_example
npx -y [email protected] status
npx -y [email protected] doctor
npx -y [email protected] restore
npx -y [email protected] uninstallThe first release supports Apple Silicon and Intel Macs. Themes and state are
stored under ~/Library/Application Support/SkinCraft/. A user LaunchAgent
reapplies the selected theme after normal restarts. Three consecutive structure
or injection failures disable persistence and restart Codex with its official
appearance.
Security model
- Theme packages use Ed25519 signatures and SHA-256 asset hashes.
- Theme JSON is validated against a fixed schema and cannot contain JavaScript.
- Renderer discovery accepts only
app://pages exposed byws://127.0.0.1:<port>. - The app bundle and its signature are never patched.
- The CLI does not read conversations, API keys, project files, or payment data.
restoredisables persistence before restarting Codex normally.
Development
npm test
SKINCRAFT_API_URL=http://127.0.0.1:3000 node src/cli.mjs doctorSee NOTICE.md for upstream acknowledgements.
The recovery release accepts a short-lived install token for paid custom
themes. The token is sent only to getcodexskin.com as a Bearer credential and
is never persisted in the local theme state.
