hermes-cn-desktop

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.70). Mixed signals: several URLs are official/trusted tooling (sh.rustup.rs, v2.tauri.app, wixtoolset.org) and local dev endpoints, but the primary download sources are GitHub repos and project-hosted domains under an unvetted username (Eynzof / hermesagent.org.cn) that can publish signed/unsigned installer artifacts and bundled runtimes—so these sources could distribute executables and should be treated with caution until you verify repo reputation, release signatures, and hashes.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). The skill’s runtime includes a generic Rust proxy_request(url, method, body) that fetches arbitrary URLs supplied at runtime and returns the response JSON to the frontend/LLM context, so outsider-authored free text from public web content can be ingested via the proxy path.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The README includes an explicit install command that pipes a remote script to the shell ("curl https://sh.rustup.rs | sh"), which fetches and executes remote code as a required setup step for building/running the project, so it is a runtime-related external code execution risk.