Security
Security boundaries, responsible disclosure, and safe installation guidance for CodexTheme.dev
2026/07/17
Product boundary
Native theme import values contain appearance settings only. CodexTheme.dev does not ask for Codex credentials, API keys, source code, or access to your local projects.
External Skin tools can have a broader local security boundary because they may use loopback debugging access or inject local resources. Read the exact repository revision, license, requirements, known issues, and restore steps before running one. CodexTheme.dev does not host third-party installers.
Account data
Passwords and sessions are handled by Better Auth. CodexTheme.dev does not receive or store payment-card numbers — no purchases take place on this site.
Responsible disclosure
Send a concise report with affected URL, reproduction steps, impact, and supporting evidence to support@codextheme.dev. Do not access other users' data, disrupt service, or publish an unpatched exploit. We will acknowledge actionable reports and coordinate remediation.
Independent and unofficial. Not affiliated with or endorsed by OpenAI. Codex is a trademark of OpenAI.