Codex Skin LabCodex Dream Skin safety model
Understand what runtime theming changes and the limits of loopback CDP.
Official app remains the runtime
The workflow styles the official Codex renderer rather than redistributing a modified application bundle.
Loopback is local, not permissionless
127.0.0.1 blocks other machines, but local processes running as your user may still access a powerful debugging endpoint.
Treat scripts as executable code
A recipe is data. Injector scripts are code. Review source and avoid opaque repackaged installers.
Appearance stays separate
A skin should not alter API keys, model providers, proxy settings, accounts, or unrelated configuration.
Restore is a security action
Stop the injector and close the debug session when you finish.
Ready to choose a theme?
Preview the recipe and readability before applying anything locally.