hermes-webui-agent

Warn

Audited by Snyk on May 16, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

  • Potentially malicious external URL detected (high risk: 0.70). The skill's install/startup steps instruct fetching and executing remote code from the GitHub repository (git clone https://github.com/nesquena/hermes-webui.git) and/or pulling and running the container image (ghcr.io/nesquena/hermes-webui:latest), which are required runtime dependencies that will execute externally-sourced code.

Issues (1)

W012
MEDIUM

Unverifiable external dependency detected (runtime URL that controls agent).

Audit Metadata
Risk Level
MEDIUM
Analyzed
May 16, 2026, 02:52 PM
Issues
1
Security Audit — snyk — hermes-webui-agent