Editing XML and Lua game files locally is allowed, and you can change cosmetics on your end as you wish. Tournament mode guards against such mods in tournaments, and even in actual games, any advantage you can gain from such mods is minimal.
Modifying the game code in memory, using hacks or otherwise changing internal game code is not allowed if you are doing it with malicious intent. This means tools like zoom hack.