hermesfusion-multi-model-panel

SUSPICIOUS: the skill’s orchestration purpose matches its core behavior, but trust and scope are weakened by a publisher/source mismatch, support for arbitrary custom command backends, and credential forwarding to child CLIs. No clear malware or exfiltration endpoint is shown, but the install provenance and execution model make this a medium-risk skill.