registry / codex-plus-patcher / 0.21.0

codex-plus-patcher@0.21.0

Patch queue tool for building local ChatGPT Plus or Codex Plus apps from installed OpenAI desktop apps.

AI Security Review

scanned 11h ago · by lpm-firewall-ai

LPM treats this as warn-only first-party agent extension lifecycle risk. An explicit CLI invocation can create and sign a modified ChatGPT/Codex app containing package runtime plugins. Release mode can download and execute a patch-set module from a GitHub repository chosen by the user.

Static reason

One or more suspicious static signals were detected.

Trigger

User runs `apply`, `launch-dev`, `audit-plugins`, or release mode with `--github-repo`.

Impact

The copied AI desktop app gains package-supplied code with app and local-repository access; user-selected release bundles add a remote code-loading path.

Mechanism

User-invoked desktop-app ASAR patching and injected runtime plugins.

Rationale

Source inspection found an explicit user-invoked AI desktop-app extension and optional remote patch-bundle loader, but no lifecycle-triggered mutation, credential exfiltration, stealth, or concrete malicious chain. This is a real dangerous capability requiring a warning rather than a block.

Evidence

package.jsonsrc/cli.jssrc/core/patch-engine.jssrc/core/release.jssrc/runtime/host/worker.jssrc/core/plugin-audit.jssrc/core/dev-mode.jssrc/runtime/plugins/mermaidFullscreen.js

Network endpoints4

api.github.com/repos/${repo}/releases/latestapi.github.com/repos/${repo}/releases/tags/${tag}

codex-plus-patcher@0.21.0

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code