hermes-web-ui-dashboard

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). The list includes direct raw GitHub shell script links (curl-able setup.sh), a prebuilt Docker image and npm package from untrusted/unknown user accounts (EKKOLearnAI / ekkoye8888), and GitHub repos of unclear provenance — all high-risk distribution vectors — while many localhost and official API endpoints are benign but do not mitigate the risk of running remote installers or images.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The README includes commands that fetch and execute remote code—specifically the auto-setup script fetched/executed via "bash <(curl -fsSL https://raw.githubusercontent.com/EKKOLearnAI/hermes-web-ui/main/scripts/setup.sh)" and the development flow "git clone https://github.com/EKKOLearnAI/hermes-web-ui.git" followed by npm install/npm run (which downloads and runs remote code)—so these URLs are runtime/installation dependencies that execute remote code.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The prompt includes explicit commands that modify system state requiring root (creating/modifying a systemd service in /etc and running sudo systemctl, and sudo chown usage), which pushes the agent to perform privileged actions on the host.