hermes-control-interface-dashboard

SUSPICIOUS. The skill’s capabilities mostly match a self-hosted admin dashboard, and data appears to stay on the local/self-hosted system rather than being sent to an unrelated intermediary. However, trust is weakened by the publisher mismatch (ara.so skill pointing to a personal xaspx repo), unpinned GitHub installation, and especially the broad, high-impact host access it enables, including terminal execution, file access, cron control, backups, and a root-run deployment example.