hermes-agentmesh-async-bus

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.90). These URLs are suspicious because they instruct downloading and running executable scripts and config files directly from a personal/local HTTP server (multiple http://$MAC_MINI_IP:8080/... and 192.168.x.x/localhost entries) and reference a GitHub repo with a random/suspicious username — a common malware distribution pattern that also exposes potential secrets via .env files.

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 0.90). The content contains high-risk, intentional patterns: it instructs disabling Redis protections (binding 0.0.0.0 and setting protected-mode no), serving and distributing environment files (including API keys) over unauthenticated HTTP, and using a central file-server + automated service installers to push/execute worker code — collectively enabling credential exposure, remote code execution/backdoor updates, and supply-chain compromise.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill’s install/runtime steps fetch and then execute remote code — e.g., git clone https://github.com/seleman66eeddwegger3-art/hermes-agentmesh.git and the curl pulls from the hub like http://$MAC_MINI_IP:8080/worker_node.py (saved and run by systemd/LaunchAgent) — so external URLs deliver executable worker code used at runtime.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill explicitly instructs running sudo to edit system Redis config (binding 0.0.0.0 and disabling protected-mode), and to run other privileged commands (e.g., sudo loginctl), and installs persistent service units — all of which modify system configuration and require/encourage elevated privileges and reduce host security.