hermes-client-web-ui
Fail
Audited by Gen Agent Trust Hub on Jun 13, 2026
Risk Level: HIGHCOMMAND_EXECUTIONCREDENTIALS_UNSAFEEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The WebSocket PTY (Pseudo-Terminal) implementation allows the client to specify any command, arguments, and working directory to be executed on the server.\n
- Evidence: SKILL.md describes a WebSocket bridge that accepts JSON messages like
{ type: 'start', command: 'hermes', ... }to initiate processes.\n- [COMMAND_EXECUTION]: The application configures system-level persistence during the initial setup process.\n - Evidence: The
npm startcommand installs a LaunchAgent on macOS or a Startup shortcut on Windows to ensure the service runs on boot.\n- [CREDENTIALS_UNSAFE]: The skill documentation provides hardcoded default credentials for the web interface.\n - Evidence: Default Email
admin@admin.comand Password123456are listed in the installation section.\n- [EXTERNAL_DOWNLOADS]: The skill downloads source code from an unverified third-party repository.\n - Evidence: The instructions require
git clone https://github.com/lotsoftick/hermes_client.gitduring installation.\n- [COMMAND_EXECUTION]: API endpoints interpolate user-provided data directly into command-line arguments when spawning processes.\n - Evidence: Data from
req.bodyis passed directly into thespawnfunction for thehermesbinary without validation or allowlisting.
Recommendations
- AI detected serious security threats
Audit Metadata